Hi Jordan,
Thanks for your response..
We have checked with Network team they are saying that they can see traffic
while scanning from Sources server (ansible) to Destination (WinRM )servers
over 5986 port.
Here is the default winrm/config result on win server.
C:\Windows\system32>winrm get winrm/config
Config
MaxEnvelopeSizekb = 500
MaxTimeoutms = 1800000
MaxBatchItems = 32000
MaxProviderRequests = 4294967295
Client
NetworkDelayms = 5000
URLPrefix = wsman
AllowUnencrypted = true
Auth
Basic = true
Digest = true
Kerberos = true
Negotiate = true
Certificate = true
CredSSP = false
DefaultPorts
HTTP = 5985
HTTPS = 5986
TrustedHosts
Service
RootSDDL =
O:NSG:BAD:P(A;;GA;;;BA)(A;;GR;;;IU)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
MaxConcurrentOperations = 4294967295
MaxConcurrentOperationsPerUser = 1500
EnumerationTimeoutms = 240000
MaxConnections = 300
MaxPacketRetrievalTimeSeconds = 120
AllowUnencrypted = true
Auth
Basic = true
Kerberos = true
Negotiate = true
Certificate = false
CredSSP = true
CbtHardeningLevel = Relaxed
DefaultPorts
HTTP = 5985
HTTPS = 5986
IPv4Filter = *
IPv6Filter = *
EnableCompatibilityHttpListener = false
EnableCompatibilityHttpsListener = false
CertificateThumbprint
AllowRemoteAccess = true
Winrs
AllowRemoteShellAccess = true
IdleTimeout = 7200000
MaxConcurrentUsers = 2147483647
MaxShellRunTime = 2147483647
MaxProcessesPerShell = 2147483647
MaxMemoryPerShellMB = 1024
MaxShellsPerUser = 2147483647
Pls let us know if any other info.
On Friday, October 7, 2022 at 1:09:45 AM UTC+5:30 [email protected] wrote:
> For the connection timed out either means the server is not listening on
> that port (5986) or a firewall is in the way.
>
> The bad handshake might mean the server doesn't support a TLS protocol or
> cipher suite the client supports. On older Windows hosts (pre 2016) there
> is a limited set of cipher suites that they support and some more modern
> Linux clients disable these ciphers for security purposes. This is
> unfortunately a harder problem to solve but using `openssl s_client
> -connect host:5986` is a good way to test SSL problems outside of Ansible.
>
> Thanks
>
> Jordan
> On Friday, October 7, 2022 at 4:44:48 AM UTC+10 [email protected] wrote:
>
>>
>>
>> Hi Team,
>>
>> I need help to resolve the errors below to communicate with WinRM via
>> Ansible. What will the cause for this error?
>>
>> server 1-
>> kerberos: HTTPSConnectionPool(host='10.x.x.x'; port=5986): Max retries
>> exceeded with url: /wsman (Caused by
>> ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at
>> 0x7f3d45abe5d0>; 'Connection to 10.x.x.x. timed out. (connect timeout=30)'))
>>
>> server 2-
>> kerberos: HTTPSConnectionPool(host='192.x.x.x'; port=5986): Max retries
>> exceeded with url: /wsman (Caused by SSLError(SSLError("bad handshake:
>> SysCallError(104; 'ECONNRESET')";);))
>>
>>
>> Note -HTTPS port 5986 is enabled on both servers.
>>
>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/c686091f-40af-4964-8685-e3973187660fn%40googlegroups.com.
