Manage Windows with Ansible with Kerberos Active Directory authentication

[@olewis843]

Appreciate the knowledge and step by step explanations. Once again Thank you!

[@tonyg460]

Thanks for posting looking at doing a POC at work.

[@VirtualizationHowto]

Thank you Tony for your comment 👍

[@sald35]

Is your ansible controller joined to your lab domain?

[@UrsRau]

Thanks for this nice and clear instruction. Have you ever used winrm or Kerberos inside of tower or awx? I have it all working under ansible cli but we would like to switch to using the FREE AWX WEB GUI. Can't find a nice guide to pick up and shift a working cli setup to the GUI ...

[@VirtualizationHowto]

Urs, thank you for the comment! I have covered this on my blog quite a while ago. I was using Ansible Tower in the tutorial. However, the instructions should be the same for AWX. Check out the post here: www.virtualizationhowto.com/2018/05/manage-and-configure-windows-servers-with-ansible-tower/

[@usmanmohammad2169]

Hi, thanks for the video it helps me a lot !

[@VirtualizationHowto]

Glad it helped!

[@ekelola]

Question please: does the domain account absolutely need to be have been added to an administrator group on the windows vm already? before being able to authenticate with that user?

[@VirtualizationHowto]

Administrator permissions are not required as long as winrm is configured to accept the user connection and the user has permissions to perform the tasks you are trying to perform on the target Windows system.

[@yaro137]

So you managed to ping the windows server without any prerequisites done on it's side? Even RedHat didn't manage that in their tutorial so either well done or something's missing here.

[@VirtualizationHowto]

Using Kerberos domain authentication, there are no prerequisites for making this work. WinRM gets extremely difficult in a workgroup setting though. Also, to be quite honest, there is not a lot of good documentation from a Windows side of things. Much of this I had to learn with trial and error.

[@niharikaraj5262]

how to find default realm?

[@VirtualizationHowto]

Niharika, see my blog post here for a more in depth view of Ansible configuration for Kerberos: www.virtualizationhowto.com/2018/04/configure-ansible-windows-server-kerberos-authentication-in-ubuntu/