SSO Fails on XP SP2

Jeffrey Altman jaltman at secure-endpoints.com
Wed Aug 1 09:06:28 EDT 2007


Miguel Sanders wrote:
> Ok I narrowed the problem.
> It seems that whever the user has more than 20 groups, SSO on XP2
> won't work. Below 20 groups it works OK. In XP1 there is no problem on
> the amount of group memberhips. I assume that the Cross Realm Object
> needs the NO_AUTH_REQUIRED field set in userAccountControl. However
> the DNS admin reports that he gets "Access Denied" when trying to edit
> that field of the Cross Realm object...
>
NO_AUTH_REQUIRED cannot be applied to cross realm account objects.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20070801/1194ffef/attachment.bin


More information about the Kerberos mailing list