Observability
After enabling Kerberos Authentication, WMI credentials fail in the SolarWinds Platform
After enabling Kerberos Authentication, my WMI credentials fail.
First published date
Last published date
Overview
After enabling Kerberos Authentication, my WMI credentials fail.
ERROR seen in C:\ProgramData\SolarWinds\Logs\Orion\Core.Collector.XXX.log
2025-04-17 20:06:13,077 [STP SmartThreadPool Thread #1] ERROR SolarWinds.Net.WMI.WmiConnectionBuilder - (null) WmiConnectionBuilder.IsLocalAddress targetComputer:servername.DomainOne.net.Domaintwo.net exception:System.Net.Sockets.SocketException (0x80004005): No such host is known
at System.Net.Dns.GetAddrInfo(String name)
at System.Net.Dns.InternalGetHostByName(String hostName, Boolean includeIPv6)
at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
at SolarWinds.Net.WMI.WmiConnectionBuilder.IsLocalAddress(String targetComputer)
2025-04-17 20:06:13,089 [STP SmartThreadPool Thread #1] ERROR SolarWinds.Net.WMI.WmiManager - (null) WmiManager.Query request:IPADDRESS\root\CIMV2 [DomainTwo.net\Username], Query: [select PercentProcessorUtility from Win32_PerfFormattedData_Counters_ProcessorInformation where NOT NAME LIKE "%Total%"], Options: [LI], Retries: 2, RetryInterval: 10000 exception:System.Net.Sockets.SocketException (0x80004005): No such host is known
at System.Net.Dns.GetAddrInfo(String name)
at System.Net.Dns.InternalGetHostByName(String hostName, Boolean includeIPv6)
at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
at SolarWinds.Net.WMI.WmiConnectionBuilder.IsLocalAddress(String targetComputer)
at SolarWinds.Net.WMI.WmiConnectionBuilder.GetManagementPath(String targetAddress, String rootNamespace, Boolean autoCorrectRDNSInconsistency)
at SolarWinds.Net.WMI.WmiConnectionBuilder.BuildConnection(String targetComputer, String rootNamespace, NetworkCredential credentials, Boolean autoCorrectRDNSInconsistency, AuthenticationLevel authentication, WMIAuthenticationMode wmiAuthenticationMode)
at SolarWinds.Net.WMI.WmiConnectionBuilder.OpenConnection(WmiRequest wmiRequest)
at SolarWinds.Net.WMI.WmiManager.Query(WmiRequest request)
Additional behavior of the issue.
WBEMTEST successful using both format DOMAIN\USERNAME or USERNAME@DOMAIN
WBEMTEST Query are all successful
Check the settings > All Settings> Polling Settings > Authentication Mechanism selected 'Kerberos'
Product section
Cause
This ERROR is because the domain attached to the credential, DomainTwo.net\Username, does not match the hostname, servername.DomainOne.net, to which the server resolves. SolarWinds requires a strict full name for the credentials when using Kerberos authentication. When the resolved FQDN does not match the credentials, it appends them together to try to create a hostname: servername.DomainOne.net.Domaintwo.net
Resolution
To resolve this problem, you need to use a full strict name credential that matches the resolved hostname of the server:
DomainOne.net\Username
servname@DomainOne.net
When they match, SolarWinds will properly resolve the hostname, and the credentials should pass.