Windows Integration attempt #2
Michael B Allen
mba2000 at ioplex.com
Fri Feb 2 17:38:37 EST 2007
On Fri, 02 Feb 2007 12:03:24 -0800
Quanah Gibson-Mount <quanah at stanford.edu> wrote:
> "The system could not log you on. Make sure your User name and domain
> are correct, then type your password again."
>
> Well, I'm sure both are correct, and I'm sure my password is correct,
> too, because the KDC shows that my home system successfully talked to
> it, and got all the tickets it should:
>
> Jan 19 10:47:48 kerberos1 krb5kdc[8666]: AS_REQ (1 etypes {1})
> 171.66.155.86: NEEDED_PREAUTH: quanah at stanford.edu for
> krbtgt/stanford.edu at stanford.edu, Additional pre-authentication
> required
> Jan 19 10:47:48 kerberos1 krb5kdc[8666]: AS_REQ (1 etypes {1})
> 171.66.155.86: ISSUE: authtime 1169232468, etypes {rep=1 tkt=16
> ses=1}, quanah at stanford.edu for krbtgt/stanford.edu at stanford.edu
Any time skew between the PC and KDC?
Otherwise, get a capture and look at it in Ethereal:
http://support.microsoft.com/kb/306794/EN-US/
Mike
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
More information about the Kerberos
mailing list