的WSMan和基本授權

我試圖讓使用基本authorizaion的WSMan工作。我一直都想與拒絕訪問錯誤。 Kerberos認證工作正常。的WSMan和基本授權

Windows遠程管理服務在Windows Server 2008 R2中域A上運行，並具有以下配置：

 
Config 
    MaxEnvelopeSizekb = 800 
    MaxTimeoutms = 600000 
    MaxBatchItems = 20 
    MaxProviderRequests = 4294967295 
    Client 
     NetworkDelayms = 5000 
     URLPrefix = wsman 
     AllowUnencrypted = false 
     Auth 
      Basic = true 
      Digest = true 
      Kerberos = true 
      Negotiate = true 
      Certificate = true 
      CredSSP = false 
     DefaultPorts 
      HTTP = 5985 
      HTTPS = 5986 
     TrustedHosts = * 
    Service 
     RootSDDL = O:NSG:BAD:P(A;;GA;;;S-1-5-21-2516571543-3809851355-1508507046-1008)(A;;GA;;;BA)(A;;GAGXGWGR;;;S-1-5-21-3465154619-3242790773-2173928322-17804)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD) 
     MaxConcurrentOperations = 4294967295 
     MaxConcurrentOperationsPerUser = 200 
     EnumerationTimeoutms = 600000 
     MaxConnections = 15 
     MaxPacketRetrievalTimeSeconds = 120 
     AllowUnencrypted = true 
     Auth 
      Basic = true 
      Kerberos = true 
      Negotiate = true 
      Certificate = true 
      CredSSP = true 
      CbtHardeningLevel = Relaxed 
     DefaultPorts 
      HTTP = 5985 
      HTTPS = 5986 
     IPv4Filter = * 
     IPv6Filter = * 
     EnableCompatibilityHttpListener = false 
     EnableCompatibilityHttpsListener = false 
     CertificateThumbprint = ee cd g2 5e 61 ad d0 07 07 b7 77 95 ec 38 16 02df 7f 64 51 
    Winrs 
     AllowRemoteShellAccess = true 
     IdleTimeout = 180000 
     MaxConcurrentUsers = 5 
     MaxShellRunTime = 2147483647 
     MaxProcessesPerShell = 15 
     MaxMemoryPerShellMB = 150 
     MaxShellsPerUser = 5

我是Windows 7工作站是域B上執行試驗的WSMan：

 
Test-WSMan -ComputerName https://server2008:5986 -Auth basic -Cred B\MY_USER_NAME

並獲得以下錯誤：

 
Test-WSMan : Access is denied. 
At line:1 char:11 
+ Test-WSMan -ComputerName https://server2008:5986 -Auth basic -Cred B\MY_USER_NAME 
    + CategoryInfo   : InvalidOperation: (https://server2008:5986:5986:String) [Test-WSMan], InvalidOperationException 
    + FullyQualifiedErrorId : WsManError,Microsoft.WSMan.Management.TestWSManCommand

注意，FO llowing命令工作正常：

 
Test-WSMan -ComputerName https://server2008:5986 -Auth kerberos

下列日誌apear在Windows服務器上：

 
Error 6/22/2012 12:21:27 PM Windows Remote Management 168 User authentication 

General: Sending HTTP 401 response to the client and disconnect the connection after sending the response 
Details: 
    Log Name:  Microsoft-Windows-WinRM/Operational 
    Source:  Microsoft-Windows-WinRM 
    Date:   6/22/2012 12:21:27 PM 
    Event ID:  168 
    Task Category: User authentication 
    Level:   Error 
    Keywords:  Security,Server 
    User:   NETWORK SERVICE 
    Computer:  server2008 
    Description: 
     Sending HTTP 401 response to the client and disconnect the connection after sending the response

有人可以幫我解決這個問題？這是一個配置問題還是我做錯了什麼？

謝謝。

來源

2012-06-22 Sergii Ovcharenko

嘗試與用戶名一起傳遞密碼的本地用戶進行身份驗證。我通常使用-u：乙\用戶名-p： –

WinRM的基本身份驗證不接受域。基本上你只能作爲目標機器

來源

2013-06-21 21:06:50 user1578107

謝謝，這是非常有用的。是否有官方文件可以指向某個地方？ –

的WSMan和基本授權

回答

相關問題