I have a devbox that deploys updates to our appllication/iis server from a third party application with remote powershell scripts.
The third party app generates this script to do this from the devbox to the appserver:
SetSpn -f -s HTTP/appserver username
SetSpn -f -s HTTP/appserver.mydomain.com username
I would expect to only have to run this once, but the kerberos connection throws an error randomly and can't connect. I don't see anything in the event logs and I'm trying to figure out where the problem starts.
New-PSSession : [appserver] Connecting to remote server appserver failed with the following error message : WinRM
cannot process the request. The following error with errorcode 0x80090322 occurred while using Kerberos
authentication: An unknown security error occurred.
I then have to run these commands to get the remote powershell connection back up and working from devbox to appserver.
SetSpn -d HTTP/appserver username
SetSpn -d HTTP/appserver.mydomain.com username
SetSpn -f -s HTTP/appserver username
SetSpn -f -s HTTP/appserver.mydomain.com username
Both machines are on separate local hyper-v hosts on our network
devbox => Windows 10 vm
appserver => Server 2016 vm
I am trying to figure out where to start looking for the problem. Is it because of the different hyper-v hosts or something else I can look at to see why the SPNs are no longer valid with the remote powershell connection.
User contributions licensed under CC BY-SA 3.0