Windows Clients Won't Do Kerberos
huaraz at moeller.plus.com
Fri Jun 30 02:10:24 EDT 2006
We have seen this issues too. A couple of our XP machines don't want to do
Kerberos via HTP. If you use SP2 then there are Hotfixes available, but I
don't recall the Hotfix number right now. Check with Microsoft
"Michael B Allen" <mba2000 at ioplex.com> wrote in message
news:20060629163639.24745eec.mba2000 at ioplex.com...
> I'm testing a Windows -> Apache Kerberos SSO product (see sig) with a
> customer and it's not working for them. The client is always asking for
> NTLM. It never even tries Kerberos. I know it's not browser settings
> because I wrote a simple wsh script and it too only tries NTLMSSP
> (whereas on my test network it works fine).
> Can anyone think of a reason why XP clients would refuse to try Kerberos
> when accessing services (e.g. HTTP)? I've been through all the usual
> reasons but we just can't get it to work. Is there some kind of mode
> that a Windows domain controller can run in that causes all clients not
> to do Kerberos at all? Can anyone recommend a diagnostic?
> Michael B Allen
> PHP Extension for SSO w/ Windows Group Authorization
> Kerberos mailing list Kerberos at mit.edu
More information about the Kerberos