Windows 2003 KDC: Problem mit ktpass

Rouiller Claude claude.rouiller at
Tue Jun 8 02:27:32 EDT 2004

I think you're right, because I was having trouble with the DC replication.
Now I've solved these DC replication problems and it works.

-----Original Message-----
From: Inger, Slav (.) [mailto:vinger at] 
Sent: Monday, June 07, 2004 4:34 PM
To: Rouiller Claude
Subject: RE: Windows 2003 KDC: Problem mit ktpass

Yes, this means ktpass cannot find the user account to bind to.  This may
happen when you have multiple domain controllers in a domain where
intra-domain replication isn't instantenous.  The DCs that ktpass binds to
when it queries for the name may not be aware that an account has been

- Slav Inger

UNIX Group
Advanced Technology, SIE
Ford Motor Co, FSIC #1331
E-mail: vinger at
Phone: 313.594.0216

-----Original Message-----
From: kerberos-bounces at [mailto:kerberos-bounces at]On
Behalf Of Rouiller Claude
Sent: Thursday, June 03, 2004 8:33 AM
To: Edu Kerberos at Mit. (kerberos at
Subject: Windows 2003 KDC: Problem mit ktpass


I have a problem with ktpass (from MS Windows 2003):
I type the command:
   ktpass /princ sso_jabasauth/ at SSOTEST.COUCOU.COM
/mapuser ssojabasauth /pass * /out sso_jabasauth.keytab
ktpass gives me the following error message:
   DsCrackNames returned 0x2 in the name entry for ssojabasauth.

do you know what this error meens?
It seems to me that ktpass can't find this user in the directory, but I've
checked and both the "display name" and the "user logon name" of the account
are equal to "ssojabasauth".


Kerberos mailing list           Kerberos at

More information about the Kerberos mailing list