Kerberos and windows problem ...
daylebo5@gmail.com
daylebo5 at gmail.com
Tue Mar 15 08:41:14 EST 2005
> Have you created a host principal for the machine in the KDB?
These are the following principal i have created in connection with
windows ....
host/windows.xyz.com at XYZ.COM using this cmd (ank -pw password
host/windows.xyz.com)
tom at XYZ.COM using (ank tom)
> Have you set the Kerberos Password on the machine using KSETUP?
Used the following cmds
C:> Ksetup /setdomain XYZ.COM
C:> Ksetup /addkdc XYZ.COM kdc.xyz.com
C:> Ksetup /setmachpassword password
i also created a user 'tom' in computer management and mapped the user
using the following cmds ...
C:> Ksetup /mapuser tom at XYZ.COM tom
C:> Ksetup /mapuser * *
> Are there errors reported in the KDC log?
there are two entries in krb5kdc.log
Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): AS_REQ (7 etypes {23
-133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
etypes {rep=3 tkt=16 ses=1}, tom at XYZ.COM for krbtgt/XYZ.COM at XYZ.COM
Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): TGT_REQ (7 etypes {23
-133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
etypes {rep=1 tkt=16 ses=1}, tom at XYZ.COM for
host/windows.xyz.com at XYZ.COM:
> Are there errors reported in the Windows Event Log?
Logon Failure:
Reason: An unexpected error occurred during logon
User Name: tom
Domain: XYZ.COM
Logon Type: 2
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: WINDOWS
just one more thing .. there is no active directory installed on the
windows client ...
any sugestions will help..
More information about the Kerberos
mailing list