SPN and Remote Powershell with Kerberos - Hyper-V Vm's

0

I have a devbox that deploys updates to our appllication/iis server from a third party application with remote powershell scripts.

The third party app generates this script to do this from the devbox to the appserver:

SetSpn -f -s HTTP/appserver username
SetSpn -f -s HTTP/appserver.mydomain.com username

I would expect to only have to run this once, but the kerberos connection throws an error randomly and can't connect. I don't see anything in the event logs and I'm trying to figure out where the problem starts.

New-PSSession : [appserver] Connecting to remote server appserver failed with the following error message : WinRM 
cannot process the request. The following error with errorcode 0x80090322 occurred while using Kerberos 
authentication: An unknown security error occurred.  

I then have to run these commands to get the remote powershell connection back up and working from devbox to appserver.

SetSpn -d HTTP/appserver username
SetSpn -d HTTP/appserver.mydomain.com username

SetSpn -f -s HTTP/appserver username
SetSpn -f -s HTTP/appserver.mydomain.com username

Both machines are on separate local hyper-v hosts on our network

devbox => Windows 10 vm

appserver => Server 2016 vm

I am trying to figure out where to start looking for the problem. Is it because of the different hyper-v hosts or something else I can look at to see why the SPNs are no longer valid with the remote powershell connection.

powershell
hyper-v
spn
asked on Stack Overflow Apr 21, 2021 by Eric

0 Answers

Nobody has answered this question yet.


User contributions licensed under CC BY-SA 3.0