Re: [krbdev.mit.edu #9138] Remote Powershell session creation from a Linux machine
"Rohit Tiwari via RT" <[email protected]> Wed, 11 Sep 2024 02:36:29 -0400
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <rt-4.4.3-2-2910192-1726036589-339.9138-5-0@kerborg-prod-app-1.mit.edu> |
<URL: http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=9138 >
Hi,
Below is the quick repro steps -
On a windows machine enable PS Remoting.
To enable the same one can run below Powershell cmdlet
* Enable-PSRemoting*
On a linux machine -
1) Install Powershell core on linux machine
2) Install gssntlmssp package
3) Check the kerberos version
3) Run pwsh on linux machine
- Set-PSRepository -Name PSGallery -InstallationPolicy Trusted
- Install-Module -Name PSWSMan -Force
- Install-WSMan
- exit
4) Run pwsh again on the linux machine and run the below command -
New-PSSession - ComputerName "windowsmachine IP" -Credential
'domain\username' -Authentication Negotiate
5) If kerberos version is 1.19.4 the above PSSession command will work. If
the kerberos package is 1.21.3 PSSession command will hang.
To answer your point about what is the end error I am seeing , there is no
end error seen, New-PSSession command is actually hanged.
If required I can share a DockerFile with all the steps and that can be
used for quick repro.
Tried enabling the kerberos logs. Attached the logs for reference.
_______________________________________________
krb5-bugs mailing list
[email protected]
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
non_working_kerberos.txt
(text/plain, 2.5 KB)
[572676] 1725947113.743527: Resolving unique ccache of type MEMORY [572676] 1725947113.743528: Getting initial credentials for *******@******* [572676] 1725947113.743530: Sending unauthenticated request [572676] 1725947113.743531: Sending request (197 bytes) to ******* [572676] 1725947113.743532: Sending DNS URI query for _kerberos.*******. [572676] 1725947113.743533: No URI records found [572676] 1725947113.743534: Sending DNS SRV query for _kerberos._udp.*******. [572676] 1725947113.743535: Sending DNS SRV query for _kerberos._tcp.*******. [572676] 1725947113.743536: No SRV records found [572676] 1725947113.743537: Retrying AS request with primary KDC [572676] 1725947113.743538: Getting initial credentials for *******@******* [572676] 1725947113.743540: Sending unauthenticated request [572676] 1725947113.743541: Sending request (197 bytes) to ******* (primary) [572676] 1725947113.743542: Sending DNS URI query for _kerberos.*******. [572676] 1725947113.743543: No URI records found [572676] 1725947113.743544: Sending DNS SRV query for _kerberos-master._udp.*******. [572676] 1725947113.743545: Sending DNS SRV query for _kerberos-master._tcp.*******. [572676] 1725947113.743546: No SRV records found [572676] 1725947113.743547: Destroying ccache MEMORY:an79wPh [572676] 1725947113.743548: Resolving unique ccache of type MEMORY [572676] 1725947113.743549: Getting initial credentials for *******@******* [572676] 1725947113.743551: Sending unauthenticated request [572676] 1725947113.743552: Sending request (197 bytes) to ******* [572676] 1725947113.743553: Sending DNS URI query for _kerberos.*******. [572676] 1725947113.743554: No URI records found [572676] 1725947113.743555: Sending DNS SRV query for _kerberos._udp.*******. [572676] 1725947113.743556: Sending DNS SRV query for _kerberos._tcp.*******. [572676] 1725947113.743557: No SRV records found [572676] 1725947113.743558: Retrying AS request with primary KDC [572676] 1725947113.743559: Getting initial credentials for *******@******* [572676] 1725947113.743561: Sending unauthenticated request [572676] 1725947113.743562: Sending request (197 bytes) to ******* (primary) [572676] 1725947113.743563: Sending DNS URI query for _kerberos.*******. [572676] 1725947113.743564: No URI records found [572676] 1725947113.743565: Sending DNS SRV query for _kerberos-master._udp.*******. [572676] 1725947113.743566: Sending DNS SRV query for _kerberos-master._tcp.*******. [572676] 1725947113.743567: No SRV records found [572676] 1725947113.743568: Destroying ccache MEMORY:J0Tx7X1
working_kerberos.txt
(text/plain, 19.6 KB)
[576055] 1725947423.249163: Resolving unique ccache of type MEMORY [576055] 1725947423.249164: Getting initial credentials for ******* [576055] 1725947423.249166: Sending unauthenticated request [576055] 1725947423.249167: Sending request (197 bytes) to ******* [576055] 1725947423.249168: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249169: No URI records found [576055] 1725947423.249170: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249171: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249172: No SRV records found [576055] 1725947423.249173: Retrying AS request with primary KDC [576055] 1725947423.249174: Getting initial credentials for ******* [576055] 1725947423.249176: Sending unauthenticated request [576055] 1725947423.249177: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249178: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249179: No URI records found [576055] 1725947423.249180: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249181: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249182: No SRV records found [576055] 1725947423.249183: Destroying ccache MEMORY:6Wgs97I [576055] 1725947423.249187: Resolving unique ccache of type MEMORY [576055] 1725947423.249188: Getting initial credentials for ******* [576055] 1725947423.249190: Sending unauthenticated request [576055] 1725947423.249191: Sending request (197 bytes) to ******* [576055] 1725947423.249192: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249193: No URI records found [576055] 1725947423.249194: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249195: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249196: No SRV records found [576055] 1725947423.249197: Retrying AS request with primary KDC [576055] 1725947423.249198: Getting initial credentials for ******* [576055] 1725947423.249200: Sending unauthenticated request [576055] 1725947423.249201: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249202: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249203: No URI records found [576055] 1725947423.249204: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249205: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249206: No SRV records found [576055] 1725947423.249207: Destroying ccache MEMORY:dWM4PRC [576055] 1725947423.249211: Resolving unique ccache of type MEMORY [576055] 1725947423.249212: Getting initial credentials for ******* [576055] 1725947423.249214: Sending unauthenticated request [576055] 1725947423.249215: Sending request (197 bytes) to ******* [576055] 1725947423.249216: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249217: No URI records found [576055] 1725947423.249218: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249219: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249220: No SRV records found [576055] 1725947423.249221: Retrying AS request with primary KDC [576055] 1725947423.249222: Getting initial credentials for ******* [576055] 1725947423.249224: Sending unauthenticated request [576055] 1725947423.249225: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249226: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249227: No URI records found [576055] 1725947423.249228: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249229: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249230: No SRV records found [576055] 1725947423.249231: Destroying ccache MEMORY:e3OrEzY [576055] 1725947423.249235: Resolving unique ccache of type MEMORY [576055] 1725947423.249236: Getting initial credentials for ******* [576055] 1725947423.249238: Sending unauthenticated request [576055] 1725947423.249239: Sending request (197 bytes) to ******* [576055] 1725947423.249240: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249241: No URI records found [576055] 1725947423.249242: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249243: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249244: No SRV records found [576055] 1725947423.249245: Retrying AS request with primary KDC [576055] 1725947423.249246: Getting initial credentials for ******* [576055] 1725947423.249248: Sending unauthenticated request [576055] 1725947423.249249: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249250: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249251: No URI records found [576055] 1725947423.249252: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249253: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249254: No SRV records found [576055] 1725947423.249255: Destroying ccache MEMORY:OAD4GiV [576055] 1725947423.249259: Resolving unique ccache of type MEMORY [576055] 1725947423.249260: Getting initial credentials for ******* [576055] 1725947423.249262: Sending unauthenticated request [576055] 1725947423.249263: Sending request (197 bytes) to ******* [576055] 1725947423.249264: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249265: No URI records found [576055] 1725947423.249266: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249267: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249268: No SRV records found [576055] 1725947423.249269: Retrying AS request with primary KDC [576055] 1725947423.249270: Getting initial credentials for ******* [576055] 1725947423.249272: Sending unauthenticated request [576055] 1725947423.249273: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249274: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249275: No URI records found [576055] 1725947423.249276: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249277: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249278: No SRV records found [576055] 1725947423.249279: Destroying ccache MEMORY:G440Aub [576055] 1725947423.249283: Resolving unique ccache of type MEMORY [576055] 1725947423.249284: Getting initial credentials for ******* [576055] 1725947423.249286: Sending unauthenticated request [576055] 1725947423.249287: Sending request (197 bytes) to ******* [576055] 1725947423.249288: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249289: No URI records found [576055] 1725947423.249290: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249291: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249292: No SRV records found [576055] 1725947423.249293: Retrying AS request with primary KDC [576055] 1725947423.249294: Getting initial credentials for ******* [576055] 1725947423.249296: Sending unauthenticated request [576055] 1725947423.249297: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249298: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249299: No URI records found [576055] 1725947423.249300: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249301: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249302: No SRV records found [576055] 1725947423.249303: Destroying ccache MEMORY:cmc9MNu [576055] 1725947423.249307: Resolving unique ccache of type MEMORY [576055] 1725947423.249308: Getting initial credentials for ******* [576055] 1725947423.249310: Sending unauthenticated request [576055] 1725947423.249311: Sending request (197 bytes) to ******* [576055] 1725947423.249312: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249313: No URI records found [576055] 1725947423.249314: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249315: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249316: No SRV records found [576055] 1725947423.249317: Retrying AS request with primary KDC [576055] 1725947423.249318: Getting initial credentials for ******* [576055] 1725947423.249320: Sending unauthenticated request [576055] 1725947423.249321: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249322: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249323: No URI records found [576055] 1725947423.249324: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249325: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249326: No SRV records found [576055] 1725947423.249327: Destroying ccache MEMORY:aLJ3DNS [576055] 1725947423.249331: Resolving unique ccache of type MEMORY [576055] 1725947423.249332: Getting initial credentials for ******* [576055] 1725947423.249334: Sending unauthenticated request [576055] 1725947423.249335: Sending request (197 bytes) to ******* [576055] 1725947423.249336: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249337: No URI records found [576055] 1725947423.249338: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249339: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249340: No SRV records found [576055] 1725947423.249341: Retrying AS request with primary KDC [576055] 1725947423.249342: Getting initial credentials for ******* [576055] 1725947423.249344: Sending unauthenticated request [576055] 1725947423.249345: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249346: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249347: No URI records found [576055] 1725947423.249348: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249349: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249350: No SRV records found [576055] 1725947423.249351: Destroying ccache MEMORY:zW2sOt5 [576055] 1725947423.249355: Resolving unique ccache of type MEMORY [576055] 1725947423.249356: Getting initial credentials for ******* [576055] 1725947423.249358: Sending unauthenticated request [576055] 1725947423.249359: Sending request (197 bytes) to ******* [576055] 1725947423.249360: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249361: No URI records found [576055] 1725947423.249362: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249363: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249364: No SRV records found [576055] 1725947423.249365: Retrying AS request with primary KDC [576055] 1725947423.249366: Getting initial credentials for ******* [576055] 1725947423.249368: Sending unauthenticated request [576055] 1725947423.249369: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249370: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249371: No URI records found [576055] 1725947423.249372: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249373: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249374: No SRV records found [576055] 1725947423.249375: Destroying ccache MEMORY:96snIW2 [576055] 1725947423.249379: Resolving unique ccache of type MEMORY [576055] 1725947423.249380: Getting initial credentials for ******* [576055] 1725947423.249382: Sending unauthenticated request [576055] 1725947423.249383: Sending request (197 bytes) to ******* [576055] 1725947423.249384: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249385: No URI records found [576055] 1725947423.249386: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249387: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249388: No SRV records found [576055] 1725947423.249389: Retrying AS request with primary KDC [576055] 1725947423.249390: Getting initial credentials for ******* [576055] 1725947423.249392: Sending unauthenticated request [576055] 1725947423.249393: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249394: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249395: No URI records found [576055] 1725947423.249396: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249397: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249398: No SRV records found [576055] 1725947423.249399: Destroying ccache MEMORY:x7421X3 [576055] 1725947423.249403: Resolving unique ccache of type MEMORY [576055] 1725947423.249404: Getting initial credentials for ******* [576055] 1725947423.249406: Sending unauthenticated request [576055] 1725947423.249407: Sending request (197 bytes) to ******* [576055] 1725947423.249408: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249409: No URI records found [576055] 1725947423.249410: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249411: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249412: No SRV records found [576055] 1725947423.249413: Retrying AS request with primary KDC [576055] 1725947423.249414: Getting initial credentials for ******* [576055] 1725947423.249416: Sending unauthenticated request [576055] 1725947423.249417: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249418: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249419: No URI records found [576055] 1725947423.249420: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249421: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249422: No SRV records found [576055] 1725947423.249423: Destroying ccache MEMORY:Gn6SJxg [576055] 1725947423.249427: Resolving unique ccache of type MEMORY [576055] 1725947423.249428: Getting initial credentials for ******* [576055] 1725947423.249430: Sending unauthenticated request [576055] 1725947423.249431: Sending request (197 bytes) to ******* [576055] 1725947423.249432: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249433: No URI records found [576055] 1725947423.249434: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249435: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249436: No SRV records found [576055] 1725947423.249437: Retrying AS request with primary KDC [576055] 1725947423.249438: Getting initial credentials for ******* [576055] 1725947423.249440: Sending unauthenticated request [576055] 1725947423.249441: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249442: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249443: No URI records found [576055] 1725947423.249444: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249445: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249446: No SRV records found [576055] 1725947423.249447: Destroying ccache MEMORY:UbTWjIe [576055] 1725947423.249451: Resolving unique ccache of type MEMORY [576055] 1725947423.249452: Getting initial credentials for ******* [576055] 1725947423.249454: Sending unauthenticated request [576055] 1725947423.249455: Sending request (197 bytes) to ******* [576055] 1725947423.249456: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249457: No URI records found [576055] 1725947423.249458: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249459: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249460: No SRV records found [576055] 1725947423.249461: Retrying AS request with primary KDC [576055] 1725947423.249462: Getting initial credentials for ******* [576055] 1725947423.249464: Sending unauthenticated request [576055] 1725947423.249465: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249466: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249467: No URI records found [576055] 1725947423.249468: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249469: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249470: No SRV records found [576055] 1725947423.249471: Destroying ccache MEMORY:PzLGvhO [576055] 1725947423.249475: Resolving unique ccache of type MEMORY [576055] 1725947423.249476: Getting initial credentials for ******* [576055] 1725947423.249478: Sending unauthenticated request [576055] 1725947423.249479: Sending request (197 bytes) to ******* [576055] 1725947423.249480: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249481: No URI records found [576055] 1725947423.249482: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249483: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249484: No SRV records found [576055] 1725947423.249485: Retrying AS request with primary KDC [576055] 1725947423.249486: Getting initial credentials for ******* [576055] 1725947423.249488: Sending unauthenticated request [576055] 1725947423.249489: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249490: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249491: No URI records found [576055] 1725947423.249492: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249493: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249494: No SRV records found [576055] 1725947423.249495: Destroying ccache MEMORY:sQ3Mr2T [576055] 1725947423.249499: Resolving unique ccache of type MEMORY [576055] 1725947423.249500: Getting initial credentials for ******* [576055] 1725947423.249502: Sending unauthenticated request [576055] 1725947423.249503: Sending request (197 bytes) to ******* [576055] 1725947423.249504: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249505: No URI records found [576055] 1725947423.249506: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249507: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249508: No SRV records found [576055] 1725947423.249509: Retrying AS request with primary KDC [576055] 1725947423.249510: Getting initial credentials for ******* [576055] 1725947423.249512: Sending unauthenticated request [576055] 1725947423.249513: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249514: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249515: No URI records found [576055] 1725947423.249516: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249517: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249518: No SRV records found [576055] 1725947423.249519: Destroying ccache MEMORY:btqqu0l [576055] 1725947423.249523: Resolving unique ccache of type MEMORY [576055] 1725947423.249524: Getting initial credentials for ******* [576055] 1725947423.249526: Sending unauthenticated request [576055] 1725947423.249527: Sending request (197 bytes) to ******* [576055] 1725947423.249528: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249529: No URI records found [576055] 1725947423.249530: Sending DNS SRV query for _kerberos._udp*******. [576055] 1725947423.249531: Sending DNS SRV query for _kerberos._tcp*******. [576055] 1725947423.249532: No SRV records found [576055] 1725947423.249533: Retrying AS request with primary KDC [576055] 1725947423.249534: Getting initial credentials for ******* [576055] 1725947423.249536: Sending unauthenticated request [576055] 1725947423.249537: Sending request (197 bytes) to ******* (primary) [576055] 1725947423.249538: Sending DNS URI query for _kerberos*******. [576055] 1725947423.249539: No URI records found [576055] 1725947423.249540: Sending DNS SRV query for _kerberos-master._udp*******. [576055] 1725947423.249541: Sending DNS SRV query for _kerberos-master._tcp*******. [576055] 1725947423.249542: No SRV records found [576055] 1725947423.249543: Destroying ccache MEMORY:KDKRMZi