[37643] in Kerberos
Searching a debugging tool for kerberos inside Windows 10 Desktop
daemon@ATHENA.MIT.EDU (Pablo Silva)
Thu Aug 25 07:53:12 2016
To: kerberos@mit.edu
From: Pablo Silva <psilva@bbr.cl>
Message-ID: <0348fab5-21cb-8f1d-9dfb-de2794aabf6c@bbr.cl>
Date: Thu, 25 Aug 2016 08:53:29 -0300
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi! Dear Colleagues,
I'm taking my first steps in using kerberos, our goal is to authenticate users who wish to use their Windows desktops via FreeIPA.
The issue is that we have done both FreeIPA configuration as in the windows client, but every time I try to use my credentials that exist in FreeIPA, I see an error message in windows logs indicating:
The Security System detected an authentication error for the server DNS/ds1.bbr.cl. The failure code from authentication protocol Kerberos was "No authority could be contacted for authentication.
(0x80090311)".
The kerberos configuration inside the windows desktop is:
C:\Windows\system32>ksetup
default realm = BBR.CL (external)
BBR.CL:
kdc = testwin10.areaprod.b2b
kpasswd = testwin10.areaprod.b2b
Realm Flags = 0x0No Realm Flags
Mapping all users (*) to a local account by the same name (*).
C:\Windows\system32>
the KDC is tha same desktop.. is ok? or there is a mistake?
I don't know how i can to do debug, for detect the bug in the configuration.., searching by google, i can to find the following project:
http://blog.michelbarneveld.nl/michel/archive/2009/12/05/kerberos-authentication-tester.aspx
Is very nice the tool, but i need one for debug the authentication using kerberos againts to freeipa server, no http server..., also i tryed to usehttps://support.microsoft.com/en-us/kb/262177, but without success in my desktop windows 10.
Thanks in advance, if you have any hint for this..
-Pablo
ps: FreeIPa Server configuration for Kerberoshttps://www.freeipa.org/page/Windows_authentication_against_FreeIPA
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
