wsman with credssp in cluster

-

i have fileserver cluster named clusterfs1 nodes node1 , node2
when run test-wsman node1, succeed

test-wsman -computername node1 -credential $eu -authentication credssp

wsmid           : http://schemas.dmtf.org/wbem/wsman/identity/1/wsmanidentity.xsd
protocolversion : http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
productvendor   : microsoft corporation
productversion  : os: 6.1.7601 sp: 1.0 stack: 3.0

but when run test-wsman clusterfs1 have failed

test-wsman -computername clusterfs1 -credential $eu -authentication credssp
test-wsman : <f:wsmanfault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" code="2150858909"
machine="desk1.domain.local"><f:message>an unknown security error occurred. </f:message></f:wsmanfault>
at line:1 char:1
+ test-wsman -computername clusterfs1 -credential $eu -authentication credssp
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + categoryinfo          : invalidoperation: (clusterfs1:string) [test-wsman], invalidoperationexception
    + fullyqualifiederrorid : wsmanerror,microsoft.wsman.management.testwsmancommand

monitoring packages network monitor 3.4 wsman client receives return http 401

know if can use credssp wsman connect cluster's network name

thanks dears


i found solution

i removed spn entries wsman/clusterfs1 , wsman/clusterfs1.domain.local cluster name clusterfs1

after able connect via wsman cluster name. monitored there no attempt use kerberor

:)



Windows Server  >  Windows Server 2012 General



Comments

Post a Comment

Popular posts from this blog

Global Catalog ?

-
greetings! we have set 2008 r2 x64 server in our company. -we promote server dc -we add ad roles -we have transfered fsmo roles on server -we have add dns role on server question: server going our primary dc, cause old 1 eventualy going shut down completely. must still export , import dhcp new server. problem/question global catalog. have 1 forest, 2 domains. in primary domain 3 dc's (this new server 1 of them), , in child domain have 2 dc's. -is wrong if new server holds global catalog? read somewhere fsmo roles , global catalog together, not recommended? -would wrong if every dc in our company global catalog? with best regards, bostjan bostjanc you have 2 domains. need 1 schema master , 1 domain naming master in forest. recommended these roles reside on dc's in root domain, not required. need 1 pdc emulator, rid master, , infrastructure master each domain. in case, in both of your domains, either dc's should gc's, or infrastructure ma...
Read more

mailing list

-
how create mailing list see article "creating mail merge data source” at: http://www.word.mvps.org/faqs/mailmerge/createadatasource.htm  -- hope helps. doug robbins - word mvp, dkr[atsymbol]mvps[dot]org posted via community bridge "mailing list" wrote in message news:25d6abcb-1717-4ec8-9587-860696c38f53@communitybridge.codeplex.com... how create mailing list doug robbins - word mvp dkr[atsymbol]mvps[dot]org Microsoft Office  >  Word IT Pro Discussions
Read more

Global Catalog

-
why recommended microsoft have global catalog in domain controller? why message import infrastructure master role in case not install global catalog in secondary dc? you can read here. https://technet.microsoft.com/en-us/library/cc737269(v=ws.10).aspx  in single-domain forest, configure domain controllers global catalog servers. because every domain controller stores domain directory partition in forest, configuring each domain controller global catalog server not require additional disk space usage, cpu usage, or replication traffic. in single-domain forest, domain controllers act "virtual global catalog servers" in can respond authentication or service request. special condition single-domain forests design (authentication requests not require contacting global catalog server, when there multiple domains , user can member of universal group exists in different domain). however, domain controllers designated global catalog servers can respond global catalog...
Read more