Observability

After enabling Kerberos Authentication, WMI credentials fail in the SolarWinds Platform

After enabling Kerberos Authentication, my WMI credentials fail.

First published date

4/30/2025 7:03 PM

Last published date

5/10/2025 9:05 PM

Overview

After enabling Kerberos Authentication, my WMI credentials fail.

ERROR seen in C:\ProgramData\SolarWinds\Logs\Orion\Core.Collector.XXX.log

2025-04-17 20:06:13,077 [STP SmartThreadPool Thread #1] ERROR SolarWinds.Net.WMI.WmiConnectionBuilder - (null)  WmiConnectionBuilder.IsLocalAddress targetComputer:servername.DomainOne.net.Domaintwo.net exception:System.Net.Sockets.SocketException (0x80004005): No such host is known
   at System.Net.Dns.GetAddrInfo(String name)
   at System.Net.Dns.InternalGetHostByName(String hostName, Boolean includeIPv6)
   at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
   at SolarWinds.Net.WMI.WmiConnectionBuilder.IsLocalAddress(String targetComputer)
2025-04-17 20:06:13,089 [STP SmartThreadPool Thread #1] ERROR SolarWinds.Net.WMI.WmiManager - (null)  WmiManager.Query request:IPADDRESS\root\CIMV2 [DomainTwo.net\Username], Query: [select PercentProcessorUtility from Win32_PerfFormattedData_Counters_ProcessorInformation where NOT NAME LIKE "%Total%"], Options: [LI], Retries: 2, RetryInterval: 10000 exception:System.Net.Sockets.SocketException (0x80004005): No such host is known
   at System.Net.Dns.GetAddrInfo(String name)
   at System.Net.Dns.InternalGetHostByName(String hostName, Boolean includeIPv6)
   at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
   at SolarWinds.Net.WMI.WmiConnectionBuilder.IsLocalAddress(String targetComputer)
   at SolarWinds.Net.WMI.WmiConnectionBuilder.GetManagementPath(String targetAddress, String rootNamespace, Boolean autoCorrectRDNSInconsistency)
   at SolarWinds.Net.WMI.WmiConnectionBuilder.BuildConnection(String targetComputer, String rootNamespace, NetworkCredential credentials, Boolean autoCorrectRDNSInconsistency, AuthenticationLevel authentication, WMIAuthenticationMode wmiAuthenticationMode)
   at SolarWinds.Net.WMI.WmiConnectionBuilder.OpenConnection(WmiRequest wmiRequest)
   at SolarWinds.Net.WMI.WmiManager.Query(WmiRequest request)

 

Additional behavior of the issue.

WBEMTEST successful using both format DOMAIN\USERNAME or USERNAME@DOMAIN
WBEMTEST Query are all successful

Check the settings > All Settings> Polling Settings > Authentication Mechanism selected 'Kerberos'

Product section

Hybrid Cloud Observability

Cause

This ERROR is because the domain attached to the credential, DomainTwo.net\Username, does not match the hostname, servername.DomainOne.net, to which the server resolves. SolarWinds requires a strict full name for the credentials when using Kerberos authentication. When the resolved FQDN does not match the credentials, it appends them together to try to create a hostname:  servername.DomainOne.net.Domaintwo.net

Resolution

To resolve this problem, you need to use a full strict name credential that matches the resolved hostname of the server:

DomainOne.net\Username 

servname@DomainOne.net

When they match, SolarWinds will properly resolve the hostname, and the credentials should pass.