Problem configuring kerberos delegation on a windows 2003 domain

Michael B Allen ioplex at gmail.com
Fri Feb 29 13:57:31 EST 2008


On 2/29/08, Lima Valdes Emil <elima at monterrey-newyorklife.com.mx> wrote:
>  Kerberos trace:
>  500.652> Kerb-Warn: KerbGetTgsTicket failed to unpack KDC reply: 0x3c
>   HTTP  a_service.smnyl.com.mx

Hi Emil,

All of your diagnostics are very Windows specific which isn't going to
translate well here. You might try to get a capture and generally
adjust your terminology into "failed to get a TGT", "the SPN is",
"service ticket this", "credential that", ...

Is the "HTTP  a_service.smnyl.com.mx" supposed to be an SPN? Perhaps
that should be "HTTP/a_service.smnyl.com.mx"?

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/



More information about the Kerberos mailing list