windows two hop network access issue

[mike od]

I’m trying to run the script module with Kerberos auth on windows to call a powershell script that includes Add-DhcpServerv4Reservation and Add-DnsServerResourceRecord. 

If I set ANSIBLE_KEEP_REMOTE_FILES=1 I can log onto the host and execute the scrip locally with no issue but when using Ansible/winrm it doesn’t have the network access for the second hop to the domain controllers so I get permission denied.

Anyone have an example of passing credentials directly in a ps1?   Credssp seems to require a ComputerName but I want to execute these commands on the server that ansible has already connected too.

Thanks,

Mike

[Trond Hindenes]

Kerberos will have problems with this. You may switch to basic creds, that will probably work.