Users with % in Password Encounter 500 Errors

[eagle-rr]

When some users would run a job that winrm into a Windows server; they would receive:

[DEBUG ] handle_other(): Handling: 500 (kerberos_.py:315)[winrm.vendor.requests_kerberos.kerberos_]
[ERROR ] handle_other(): Mutual authentication unavailable on 500 response (kerberos_.py:339)[winrm.vendor.requests_kerberos.kerberos_]
[DEBUG ] handle_response(): returning <Response [500]> (kerberos_.py:428)[winrm.vendor.requests_kerberos.kerberos_]
[ERROR ] Execution finished with the following exit code: -1 (winrm-exec.py:316)[root]
[ERROR ] -1 (winrm-exec.py:317)[root]
[ERROR ] The parameter is incorrect. (extended fault data: {'transport_message': 'Bad HTTP response returned from server. Code 500', 'http_status_code': 500, 'wsmanfault_code': '87', 'fault_code': 's:Sender', 'fault_subcode': 'w:InvalidParameter'}) (winrm-exec.py:318)[root]
[WinRMPython]: result code: 255, success: false
Failed: NonZeroResultCode: [WinRMPython] Result code: 255

Project settings for the plugin are defined as:

project.plugin.NodeExecutor.WinRMPython.authtype=kerberos
project.plugin.NodeExecutor.WinRMPython.exitbehaviour=exitcode
project.plugin.NodeExecutor.WinRMPython.interpreter=/usr/bin/python3
project.plugin.NodeExecutor.WinRMPython.nossl=true
project.plugin.NodeExecutor.WinRMPython.operationtimeout=14400
project.plugin.NodeExecutor.WinRMPython.readtimeout=15400
project.plugin.NodeExecutor.WinRMPython.shell=cmd
project.plugin.NodeExecutor.WinRMPython.winrmport=5986
project.plugin.NodeExecutor.WinRMPython.winrmtransport=https
project.plugin.NodeExecutor.WinRMPython.interpreter=/usr/bin/python3

When testing a python script similar to:

import winrm 

s = winrm.Session('yourdomain ', 'transport='kerberos', auth=('user', 'password'), server_cert_validation='ignore')
r = s.run_cmd('ipconfig', ['/all'])

The user's connection (using same password and server as the Rundeck job) worked just fine.

Based on another person's suggestion that they ran into issues when the payload contained % character; I asked the user which special characters were they using in their password. They were indeed using % in their password. I asked them to change their password to not containing % character. After changing their password to not contain % character; they were able to successfully run the Rundeck job.

More details in the discussion here.

[MegaDrive68k]

Maybe related.

[ltamaster]

fix with #77