AcceptSecurityContext (SSPI) fails with SEC_E_LOGON_DENIED and a GSS-API Linux client

Sam Hartman hartmans at MIT.EDU
Wed Jun 24 14:13:36 EDT 2009


>>>>> "Matthew" == Matthew M DeLoera <mdeloera at exacq.com> writes:
8
    Matthew> Actually, my Windows service is running under the kerbsvr
    Matthew> user account, not the system account.....

Ok, then you need to import kerbsvr as a name using
gss_nt_user_principal or some such rather than gss_nt_srv_hst.  You
should not create a new principal in the KDC.

--Sam



More information about the krbdev mailing list