[29390] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Problem configuring kerberos delegation on a windows 2003 domain

daemon@ATHENA.MIT.EDU (Michael B Allen)
Fri Feb 29 13:58:25 2008

Message-ID: <78c6bd860802291057h523dbe21k33bdd6b5ab65bcf1@mail.gmail.com>
Date: Fri, 29 Feb 2008 13:57:31 -0500
From: "Michael B Allen" <ioplex@gmail.com>
To: "Lima Valdes Emil" <elima@monterrey-newyorklife.com.mx>
In-Reply-To: <E5854CC55858D04D85AB8AD5BF07F68E0FFE1B81@grecia.smnyl.com.mx>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On 2/29/08, Lima Valdes Emil <elima@monterrey-newyorklife.com.mx> wrote:
>  Kerberos trace:
>  500.652> Kerb-Warn: KerbGetTgsTicket failed to unpack KDC reply: 0x3c
>   HTTP  a_service.smnyl.com.mx

Hi Emil,

All of your diagnostics are very Windows specific which isn't going to
translate well here. You might try to get a capture and generally
adjust your terminology into "failed to get a TGT", "the SPN is",
"service ticket this", "credential that", ...

Is the "HTTP  a_service.smnyl.com.mx" supposed to be an SPN? Perhaps
that should be "HTTP/a_service.smnyl.com.mx"?

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post