[27361] in Kerberos
Re: Windows Integration attempt #2
daemon@ATHENA.MIT.EDU (Michael B Allen)
Fri Feb 2 17:39:05 2007
Date: Fri, 2 Feb 2007 17:38:37 -0500
From: Michael B Allen <mba2000@ioplex.com>
To: Quanah Gibson-Mount <quanah@stanford.edu>
Message-Id: <20070202173837.6b9fef4b.mba2000@ioplex.com>
In-Reply-To: <8155AA64680ED266273AB0D2@deus-ex.stanford.edu>
Mime-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Fri, 02 Feb 2007 12:03:24 -0800
Quanah Gibson-Mount <quanah@stanford.edu> wrote:
> "The system could not log you on. Make sure your User name and domain
> are correct, then type your password again."
>
> Well, I'm sure both are correct, and I'm sure my password is correct,
> too, because the KDC shows that my home system successfully talked to
> it, and got all the tickets it should:
>
> Jan 19 10:47:48 kerberos1 krb5kdc[8666]: AS_REQ (1 etypes {1})
> 171.66.155.86: NEEDED_PREAUTH: quanah@stanford.edu for
> krbtgt/stanford.edu@stanford.edu, Additional pre-authentication
> required
> Jan 19 10:47:48 kerberos1 krb5kdc[8666]: AS_REQ (1 etypes {1})
> 171.66.155.86: ISSUE: authtime 1169232468, etypes {rep=1 tkt=16
> ses=1}, quanah@stanford.edu for krbtgt/stanford.edu@stanford.edu
Any time skew between the PC and KDC?
Otherwise, get a capture and look at it in Ethereal:
http://support.microsoft.com/kb/306794/EN-US/
Mike
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos