Hello All,
scenario:
- SCVMM 2016 UR5 in mydomain.com
- four new hosts in sub.mydomain.com
When trying to add any of the hosts, using the sub\administrator as the runas account I get:
(410) Installation failed on hostXX.sub.domain.com, RPC server unavailable
(10444) unable to impersonate supplied credentials
and the text about disjointed namespaces etc.
I have ruled out:
- Firewall issues
- missing components ($Admin share etc.)
- Credential issues
Running this from the SCVMM server returns data without a problem:
Test-WSMan -ComputerName "hostXX.sub.domain.com" -Authentication (default and Kerberos) -Credential $creds (sub\administrator)
An SCVMM trace shows the process:
- going through a cluster discovery (which fails),
- adding the host to the database (success),
- querying WinRM for the existence of a SCVMM service (success),
- then (pretty sure this is the culprit)
Connecting to WMI for server hostXX.sub.domain.com. Service name is VMMInstallDetector (..)
COMException [ex#24a5b] caught by Connect Failed to connect to [hostXX.sub.domain.com] (more stuff, RPC unavailable etc)
- then a rollback
A message analyzer trace shows:
SCVMM IP -> host IP Operation, Status: (401), POST /wsman, Version: HTTP/1.1
Additional info: There is a firewall between the two subnets (has an any:any rule between the two for now) where I can see Kerberos traffic going to the DC's in the subdomain.
Anyone have an idea where to look? I'm hesitant to just do a manual agent install. This should work without a problem in a "vanilla" - subdomain scenario, and I'm concerned this will rear its ugly head down the line if I just try to circumvent it now.
Thx in advance for help and/or pointers!
M.