none
[WinRM - IIS Web Deploiement] Why kerberos? RRS feed

  • Question

  • Hello.

    Sorry for using the wrong place to post this. I don't find the TFS section.

    I have an issue using the "WinRM - IIS Web App Deployment" in TFS using a Local Admin account.

    2018-07-31T09:36:18.7538781Z ##[error]System.Management.Automation.Remoting.PSRemotingTransportException: Connecting to remote server "B" failed with the following error message : WinRM cannot process the request. The following error with errorcode 0x80090311 occurred while using Kerberos authentication: There are currently no logon servers available to service the logon request.  
    
    2018-07-31T09:36:18.7538781Z ##[error] Possible causes are:
    
    2018-07-31T09:36:18.7695024Z ##[error]  -The user name or password specified are invalid.
    
    2018-07-31T09:36:18.7695024Z ##[error]  -Kerberos is used when no authentication method and no user name are specified.
    
    2018-07-31T09:36:18.7695024Z ##[error]  -Kerberos accepts domain user names, but not local user names.
    
    2018-07-31T09:36:18.7695024Z ##[error]  -The Service Principal Name (SPN) for the remote computer name and port does not exist.
    
    2018-07-31T09:36:18.7695024Z ##[error]  -The client and remote computers are in different domains and there is no trust between the two domains.
    
    2018-07-31T09:36:18.7695024Z ##[error] After checking for the above issues, try the following:
    
    2018-07-31T09:36:18.7695024Z ##[error]  -Check the Event Viewer for events related to authentication.
    
    2018-07-31T09:36:18.7695024Z ##[error]  -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport.
    
    2018-07-31T09:36:18.7695024Z ##[error] Note that computers in the TrustedHosts list might not be authenticated.
    
    2018-07-31T09:36:18.7695024Z ##[error]   -For more information about WinRM configuration, run the following command: winrm help config. For more information, see the about_Remote_Troubleshooting Help topic.
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Management.Automation.Runspaces.AsyncResult.EndInvoke()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Management.Automation.Runspaces.Internal.RunspacePoolInternal.EndOpen(IAsyncResult asyncResult)
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Management.Automation.RemoteRunspace.Open()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at Microsoft.VisualStudio.Services.DevTestLabs.Deployment.Deployment.PowershellExecutor.GetOpenedRunspace()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at Microsoft.VisualStudio.Services.DevTestLabs.Deployment.Deployment.PowershellExecutor.EstablishRemoteSession()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at Microsoft.VisualStudio.Services.DevTestLabs.Deployment.RetryExecutor.Execute(Action action)
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Threading.Tasks.Task.Execute()
    
    2018-07-31T09:36:18.7695024Z ##[error]--- End of stack trace from previous location where exception was thrown ---
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
    
    2018-07-31T09:36:18.7695024Z ##[error]   at Microsoft.VisualStudio.Services.DevTestLabs.Deployment.Deployment.PowershellExecutor.<Initialize>d__29.MoveNext()
    
    2018-07-31T09:36:18.7695024Z ##[error]--- End of stack trace from previous location where exception was thrown ---
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
    
    2018-07-31T09:36:18.7695024Z ##[error]   at Microsoft.VisualStudio.Services.DevTestLabs.Deployment.Deployment.PowershellExecutor.<Initialize>d__23.MoveNext()
    
    2018-07-31T09:36:18.7695024Z ##[error]--- End of stack trace from previous location where exception was thrown ---
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
    
    2018-07-31T09:36:18.7695024Z ##[error]   at Microsoft.VisualStudio.Services.DevTestLabs.Deployment.Deployment.RemoteDeploymentHelper.<Initialize>d__0.MoveNext()
    
    2018-07-31T09:36:18.7695024Z ##[error]--- End of stack trace from previous location where exception was thrown ---
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
    
    2018-07-31T09:36:18.7695024Z ##[error]   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
    
    2018-07-31T09:36:18.7695024Z ##[error]   at Microsoft.VisualStudio.Services.DevTestLabs.Deployment.Deployment.DeploymentClient.<RunAsync>d__24.MoveNext()
    
    2018-07-31T09:36:18.7695024Z ##[error]For more info please refer to http://aka.ms/iisextnreadme

    My server architecture is:

    1 domain named for this example : "test"

    3 server in this domain : A & B & C

    A is the TFS server

    B is the server where i want to deploy my web package (MSdeploy)

    C is my test server where i successfuly deploy with a admin domain account

    I successfuly copy some files on B with the "Windows Machine File Copy" in TFS with the local account, but the IIS deploy failed to connect by winrm. The server have the same configuration and i think kerberos don't allow connection with a local account not in machin domain. I have search some topics and all related this.

    Is there a thing i don't try?

    Sincerly


    • Edited by Bobuche Tuesday, July 31, 2018 12:28 PM
    Tuesday, July 31, 2018 12:28 PM

All replies

  • Sorry for using the wrong place to post this. I don't find the TFS section.

    Hi bobuche,

    As you know, this is Windows communication foundation forum. And I think this is a question about the usage of WINRM (Windows Remote Management). I suggest you could check the official documentation below to troubleshoot the issue.

    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn265971(v=ws.11)

    If your problem still exists, I suggest you could post your issue on TFS forum.

    https://developercommunity.visualstudio.com/spaces/22/index.html

    Feel free to let me know if you have any questions.

    Best Regards

    Abraham


    Wednesday, August 1, 2018 8:51 AM
    Moderator