Kerberos and windows problem ...

[Jeffrey Altman]

daylebo5 at gmail.com wrote:
> 
> Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): AS_REQ (7 etypes {23
> -133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
> etypes {rep=3 tkt=16 ses=1}, tom at XYZ.COM for krbtgt/XYZ.COM at XYZ.COM
> 
> Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): TGT_REQ (7 etypes {23
> -133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
> etypes {rep=1 tkt=16 ses=1}, tom at XYZ.COM for
> host/windows.xyz.com at XYZ.COM:
> 
> 
>>Are there errors reported in the Windows Event Log?
> 
> Logon Failure:
>  	Reason:		An unexpected error occurred during logon
>  	User Name:	tom
>  	Domain:		XYZ.COM
>  	Logon Type:	2
>  	Logon Process:	User32
>  	Authentication Package:	Negotiate
>  	Workstation Name:	WINDOWS
> 
> 
> just one more thing .. there is no active directory installed on the
> windows client ... 
> any sugestions will help..

Windows does not support 3DES.  You must only generate RC4 or single DES 
keys for the host principal.  In general, if you have support for RC4
then do not generate DES at all.