It is very likely that the images are using a version of OpenSSL that is disabling legacy providers that is required by NTLM (RC4/MD4/etc). Seejborean93/omi#71 (comment) for some more information when I last tracked this down.

Just as an FYI it might be a good idea to pin the version of PSWSMan or at least put a major version ceiling. I've been hoping to push a new major version based on a pure C# library underPSWSMan to avoid the mess that islibmi and while it hasn't been released yet it supports more features thanlibmi and provides a better experience when it comes to error messages and things like authentication support.

Thanks for the tip@jborean93 , I was able to go through some of those troubleshooting steps.

The python snippet worked without me needing to enable any legacy providers.

So I moved on to enabling debug logging for OMI. With the logs being generated I found a few interesting things:

• Connecting only hangs when the credentials are correct and authorized. I get an error message in pwsh if for example the credentials are not authorized to connect to the machine.

• Within the part covered by the OMI log, the process seems to be done, socket closed, etc. I'm not sure why it hangs on the pwsh side.

• The last interesting looking thing before it closes that socket is:

  2024/03/04 01:25:36 [572,595] ERROR: null(0): EventId=20146 Priority=ERROR HTTP: Client Authorization failed. gss:(Invalid token was supplied) mech:(Unknown error)
  2024/03/04 01:25:36 [572,595] DEBUG: null(0): _ReadHeader - OK exit

  (this is withgood credentials)

• In contrast, with unauthorized credentials it looks like this:

  2024/03/04 01:33:05 [572,595] ERROR: null(0): EventId=20146 Priority=ERROR HTTP: Client Authorization failed. gss:(null) mech:(null)
  2024/03/04 01:33:05 [572,595] DEBUG: null(0): _ReadHeader - ACCESS DENIED reslt = 0

• One other thing, toward the beginning of the log, is a message about it loading gss api, it seems like it doesn't this once on init, not for each request:

  2024/03/04 01:17:18 [572,595] DEBUG: null(0): EventId=50012 Priority=DEBUG HTTP: Loading gss api. (libgssapi_krb5.so.2)

  I only point this out because it sort of looks like it's loading only krb5 and not loading ntlm? But I'm not sure if I'm misreading it.

• I guess for completeness, with Kerberos auth (only thing I'm changing is the format fromDOM\user touser@DOM), it's completely successful:

  2024/03/04 01:39:07 [572,595] DEBUG: null(0): EventId=50010 Priority=DEBUG HTTP: Authorization Complete.
  2024/03/04 01:39:07 [572,595] DEBUG: null(0): _ReadHeader - is authorized. continue
  2024/03/04 01:39:07 [572,595] DEBUG: null(0): _ReadHeader - OK exit