Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
tutorial:adm:configuration_-_winrm [2019/10/08 13:17]
fiserp [Debug] 		tutorial:adm:configuration_-_winrm [2019/10/08 13:20]
fiserp [Debug]
Line 84: Line 84:
 <code>Restart-Service winrm</code> <code>Restart-Service winrm</code>
  
-==== Debug ====+==== Debugging ====
 When you need to check if WinRM is ready for connection but you don't have access to the Windows server to check the configuration yourself use this tips. When you need to check if WinRM is ready for connection but you don't have access to the Windows server to check the configuration yourself use this tips.
  
Line 120: Line 120:
  
 === Commons errors === === Commons errors ===
-**Specified credentials were rejected by the server** - this error can be caused by:+== Specified credentials were rejected by the server == 
 +Can be caused by:
   * wrong username or password   * wrong username or password
-  * user is not in correct group+  * user is not in correct user group on the Windows system
 {{:tutorial:adm:winrm_rejected.png?nolink&600|}} {{:tutorial:adm:winrm_rejected.png?nolink&600|}}
  
-**Access denied 500** - this error can be caused by:+== Access denied 500 == 
 +Can be caused by:
   * wrong username or password   * wrong username or password
   * WinRM SDDL is not configured   * WinRM SDDL is not configured
Line 131: Line 133:
  
  
-**CredSSP handshake error**  +== CredSSP handshake error == 
-If you get this error when you trying to use CredSSP over HTTPS connection, the problem can be that there is configured certificate thumbprint directly in ''config/service''.+If you get this error when you trying to use CredSSP over HTTPS connection, the problem can be that there is configured certificate thumbprint directly in ''winrm/config/service''.
 <code>class 'requests_credssp.exceptions.AuthenticationException'>("Server did not response with a CredSSP token after step Step 1. TLS Handshake - actual ''",)</code> <code>class 'requests_credssp.exceptions.AuthenticationException'>("Server did not response with a CredSSP token after step Step 1. TLS Handshake - actual ''",)</code>
 Execute this command to delete ''CertificateThumbprint'' value from the ''config/service''. Execute this command to delete ''CertificateThumbprint'' value from the ''config/service''.
 <code>winrm set winrm/config/service '@{CertificateThumbprint=""}'</code> <code>winrm set winrm/config/service '@{CertificateThumbprint=""}'</code>
- +The configuration of certificate thumbprint in the Listener should remain there.
 ==== HTTPS support ==== ==== HTTPS support ====
 The best case is to use HTTPS connection to connect to WinRM. To achieve this we need to do some more configuration on the server and on the client. The best case is to use HTTPS connection to connect to WinRM. To achieve this we need to do some more configuration on the server and on the client.
  • by erbenr