Windows Integration attempt #2

[Quanah Gibson-Mount]

--On February 2, 2007 5:38:37 PM -0500 Michael B Allen <mba2000 at ioplex.com> 
wrote:

> On Fri, 02 Feb 2007 12:03:24 -0800
> Quanah Gibson-Mount <quanah at stanford.edu> wrote:
>
>> "The system could not log you on.  Make sure your User name and domain
>> are correct, then type your password again."
>>
>> Well, I'm sure both are correct, and I'm sure my password is correct,
>> too, because the KDC shows that my home system successfully talked to
>> it, and got all the tickets it should:
>>
>> Jan 19 10:47:48 kerberos1 krb5kdc[8666]: AS_REQ (1 etypes {1})
>> 171.66.155.86: NEEDED_PREAUTH: quanah at stanford.edu for
>> krbtgt/stanford.edu at stanford.edu, Additional pre-authentication
>> required
>> Jan 19 10:47:48 kerberos1 krb5kdc[8666]: AS_REQ (1 etypes {1})
>> 171.66.155.86: ISSUE: authtime 1169232468, etypes {rep=1 tkt=16
>> ses=1}, quanah at stanford.edu for krbtgt/stanford.edu at stanford.edu
>
> Any time skew between the PC and KDC?

Nope, I can get k5 ticket using NIM with my local user account just fine. 
And, if there was time skew, I wouldn't have been able to successfully get 
a ticket.

> Otherwise, get a capture and look at it in Ethereal:
>
>    http://support.microsoft.com/kb/306794/EN-US/

I'll look at that URL, thanks.

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html