[23529] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos and windows problem ...

daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Tue Mar 15 12:53:26 2005

From: Jeffrey Altman <jaltman2@nyc.rr.com>
Message-ID: <W7FZd.35344$534.1085@twister.nyc.rr.com>
Date: Tue, 15 Mar 2005 17:42:14 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

daylebo5@gmail.com wrote:
> 
> Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): AS_REQ (7 etypes {23
> -133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
> etypes {rep=3 tkt=16 ses=1}, tom@XYZ.COM for krbtgt/XYZ.COM@XYZ.COM
> 
> Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): TGT_REQ (7 etypes {23
> -133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
> etypes {rep=1 tkt=16 ses=1}, tom@XYZ.COM for
> host/windows.xyz.com@XYZ.COM:
> 
> 
>>Are there errors reported in the Windows Event Log?
> 
> Logon Failure:
>  	Reason:		An unexpected error occurred during logon
>  	User Name:	tom
>  	Domain:		XYZ.COM
>  	Logon Type:	2
>  	Logon Process:	User32
>  	Authentication Package:	Negotiate
>  	Workstation Name:	WINDOWS
> 
> 
> just one more thing .. there is no active directory installed on the
> windows client ... 
> any sugestions will help..

Windows does not support 3DES.  You must only generate RC4 or single DES 
keys for the host principal.  In general, if you have support for RC4
then do not generate DES at all.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post