[23659] in Kerberos
SSPI/GSS-API : mech_dh: Invalid or unknown error
daemon@ATHENA.MIT.EDU (Jacques Lebastard)
Thu Apr 7 10:05:29 2005
Date: Thu, 07 Apr 2005 15:57:50 +0200
From: Jacques Lebastard <jacques.lebastard@evidian.com>
Message-ID: <42553c86$0$12950$626a14ce@news.free.fr>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Hi folks,
I wrote a SSPI Client / GSS-API Server application that works fine in a
tree of ActiveDirectory domains / Solaris realm environment where the
KDC are the AD domain controlers.
Server application is located in mytree.dom and users in child.mytree.dom.
However, I sometimes get an error for some users. These users can
establish a context from W2K workstations but cannot from WinXP
workstations (both workstations are located in child.mytree.dom).
The Solaris GSS-API server shows the following error message for
connections established on WinXP ws:
MAJOR(gss_accept_sec_context) : Unspecified GSS failure. Minor code may
provide more information
MINOR(gss_accept_sec_context) : mech_dh: Invalid or unknown error
What does 'mech_dh' mean ? Diffie-Hellman mechanism ???
What differences between Kerberos SSP W2K SP4 and WinXP SP 1 ?
Thanks for any hint,
--
Jacques
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
