From 4e532e0ad99396cbfc5dd32a0b02efcc57523b99 Mon Sep 17 00:00:00 2001 From: Owen Kuemerle Date: Tue, 18 Sep 2018 07:33:09 -0700 Subject: [PATCH] Add workaround for non-standard kerberos environments (#41465) * Add workaround for non-standard MIT kerberos environments * Generalize platform specific troubleshooting steps for Kerberos --- docs/docsite/rst/user_guide/windows_winrm.rst | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/docsite/rst/user_guide/windows_winrm.rst b/docs/docsite/rst/user_guide/windows_winrm.rst index fa9c8222e41..be1a3811690 100644 --- a/docs/docsite/rst/user_guide/windows_winrm.rst +++ b/docs/docsite/rst/user_guide/windows_winrm.rst @@ -427,6 +427,8 @@ work. To troubleshoot Kerberos issues, ensure that: an alias is being used. The ``krb5.conf`` file needs to be updated so that the fully qualified domain name is used and not an alias. +* If the default kerberos tooling has been replaced or modified (some IdM solutions may do this), this may cause issues when installing or upgrading the Python Kerberos library. As of the time of this writing, this library is called ``pykerberos`` and is known to work with both MIT and Heimdal Kerberos libraries. To resolve ``pykerberos`` installation issues, ensure the system dependencies for Kerberos have been met (see: `Installing the Kerberos Library`_), remove any custom Kerberos tooling paths from the PATH environment variable, and retry the installation of Python Kerberos library package. + CredSSP ------- CredSSP authentication is a newer authentication protocol that allows