[23665] in Kerberos
Re: SSPI/GSS-API : mech_dh: Invalid or unknown error
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Thu Apr 7 16:50:54 2005
Message-ID: <42559C62.8090008@nyc.rr.com>
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Date: Thu, 07 Apr 2005 20:37:13 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Jacques Lebastard wrote:
>
> Hi folks,
>
> I wrote a SSPI Client / GSS-API Server application that works fine in a
> tree of ActiveDirectory domains / Solaris realm environment where the
> KDC are the AD domain controlers.
>
> Server application is located in mytree.dom and users in child.mytree.dom.
>
> However, I sometimes get an error for some users. These users can
> establish a context from W2K workstations but cannot from WinXP
> workstations (both workstations are located in child.mytree.dom).
>
> The Solaris GSS-API server shows the following error message for
> connections established on WinXP ws:
>
> MAJOR(gss_accept_sec_context) : Unspecified GSS failure. Minor code may
> provide more information
> MINOR(gss_accept_sec_context) : mech_dh: Invalid or unknown error
>
>
> What does 'mech_dh' mean ? Diffie-Hellman mechanism ???
>
> What differences between Kerberos SSP W2K SP4 and WinXP SP 1 ?
>
>
> Thanks for any hint,
> --
> Jacques
I suggest you obtain a network trace for the exchange.
Jeffrey Altman
--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
