Hi
I've got this ugly error "errorcode 0x80090322" when accessing one specific remote system:
Enter-PSSession : Connecting to remote server myserver failed with the following error message : WinRM cannot process
the request. The following error with errorcode 0x80090322 occurred while using Kerberos authentication: An unknown
security error occurred.
i've tryed:
- Connecting with Credential (UPN and User DNS Name)
- Resetting DNS cache (ipconfig /flushdns)
- Resetting NetBios cache (NBTStat –R)
- Resetting Kerberos Tickets (KList purge)
- Checking Trusted hosts (Get-Item wsman:localhost\client\trustedhosts) -> * on source and target system
- Checking for duplicate SPN entries (setspn -X)
- Checking for existance of http SPN entries (setspn -L)
- Enable-PSRemoting
- and: there are no entries in Application, System or Security logs that would explain the error
Everything seems to be OK. Latley, I was able to enter a pssession on this machine, now it is not possible anymore (unfortunatley, we have no change history for this server, because it is not productive)
Here my spn's:
PS C:\> setspn -L myserver
Registered ServicePrincipalNames for CN=myserver,OU=Dev_WP-SC,OU=Dev_WP,OU=Dev_Res,OU=Dev,DC=mydomain,DC=ch:
MSOMHSvc/myserver
MSOMHSvc/myserver.mydomain.ch
MSSQLSvc/myserver.mydomain.ch:1433
MSSQLSvc/myserver.mydomain.ch
TERMSRV/myserver
TERMSRV/myserver.mydomain.ch
WSMAN/myserver
WSMAN/myserver.mydomain.ch
RestrictedKrbHost/myserver
HOST/myserver
RestrictedKrbHost/myserver.mydomain.ch
HOST/myserver.mydomain.ch
And here what i see in Wireshark:
Request: POST /wsman?PSVersion=5.0.10586.117 HTTP/1.1\r\n
Returns: KRB Error: KRB5KRB_AP_ERR_MODIFIED
Any Ideas?
Thomas