[29390] in Kerberos
Re: Problem configuring kerberos delegation on a windows 2003 domain
daemon@ATHENA.MIT.EDU (Michael B Allen)
Fri Feb 29 13:58:25 2008
Message-ID: <78c6bd860802291057h523dbe21k33bdd6b5ab65bcf1@mail.gmail.com>
Date: Fri, 29 Feb 2008 13:57:31 -0500
From: "Michael B Allen" <ioplex@gmail.com>
To: "Lima Valdes Emil" <elima@monterrey-newyorklife.com.mx>
In-Reply-To: <E5854CC55858D04D85AB8AD5BF07F68E0FFE1B81@grecia.smnyl.com.mx>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 2/29/08, Lima Valdes Emil <elima@monterrey-newyorklife.com.mx> wrote:
> Kerberos trace:
> 500.652> Kerb-Warn: KerbGetTgsTicket failed to unpack KDC reply: 0x3c
> HTTP a_service.smnyl.com.mx
Hi Emil,
All of your diagnostics are very Windows specific which isn't going to
translate well here. You might try to get a capture and generally
adjust your terminology into "failed to get a TGT", "the SPN is",
"service ticket this", "credential that", ...
Is the "HTTP a_service.smnyl.com.mx" supposed to be an SPN? Perhaps
that should be "HTTP/a_service.smnyl.com.mx"?
Mike
--
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos