1. Check for the fully qualified domain name (FQDN) of the Windows Domain Controller from the krb5 configuration file.
- %WINDIR%\krb5.ini (for example C:\WINDOWS)
- /etc/krb5.conf
- /etc/krb5/krb5.conf
- {Foglight Agent Manager}/state/default/config/krb5.config
[libdefaults]
default_realm = EXAMPLE.COM
[realms]
EXAMPLE.COM = {
kdc = server.example.com
}
[domain_realm]
.example.com = EXAMPLE.COM
2. Ensure the FQDN of the KDC server is reachable from the FglAM host on port 88.
Windows (PowerShell): Test-NetConnection -ComputerName server.example.com -Port 88 -InformationLevel Detailed
Linux: nc -vz server.example.com 88
3. Ensure the FQDN of the domain controller is specified in the credential properties. The domain name should be the DNS name not the NetBIOS name.
4. Restart the Foglight Agent Manager
5. If some agents can make a WinRM connection but other agents cannot check the WinRM configuration for the monitored hosts. Refer to KB article 4295397.