Ok I narrowed the problem.
It seems that whever the user has more than 20 groups, SSO on XP2
won't work. Below 20 groups it works OK. In XP1 there is no problem on
the amount of group memberhips. I assume that the Cross Realm Object
needs the NO_AUTH_REQUIRED field set in userAccountControl. Howeve
## kprop -f /opt/krb5-1.6.1/var/krb5kdc/slave_datatrans slave.ole.abc
#
#kprop: Server rejected authentication (during sendauth exchange) while
authenticating to #server
#kprop: Decrypt integrity check failed signalled from server
#Error text from server: Decrypt integrity check failed
I found tha
Miguel Sanders wrote:
> Ok I narrowed the problem.
> It seems that whever the user has more than 20 groups, SSO on XP2
> won't work. Below 20 groups it works OK. In XP1 there is no problem on
> the amount of group memberhips. I assume that the Cross Realm Object
> needs the NO_AUTH_REQUIRED field s
[EMAIL PROTECTED] wrote:
> Ok I understand.
>
> But do you know a solution for this problem?
I don't know what your problem is. Too many groups is one factor but
its not the cause of your problem.
You haven't provided enough details. However, I'm going to guess that
your non-AD realm that you are
Hello,
I am trying to create a custom .msi package for Kerberos for Windows
3.2. I was able to properly edit the .msi through orca, and it installs
with my custom krb5.ini, krb.con, etc. great. However, when it installs
on a machine with a previous version of KfW, it will not overwrite the
e
> My question is, does anyone know where to edit
> the .msi so the custom files will always overwrite the existing files?
I assume you were following the instructions in the "MSI Deployment Guide".
If you want your custom configuration files to overwrite the files on
the user's machine, you shoul
Can you get a packet capture with wireshark on port 88 when you start putty
and connect to your server ?
Markus
"Miguel Sanders" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Ok I narrowed the problem.
> It seems that whever the user has more than 20 groups, SSO on XP2
> won't w
Hello, new to the list here, hope this hasn't been answered yet. Is there a
domain length restriction when attempting to add a server to the list. I had
issues with a server whose domain was 32 characters long, not by my choice, and
it would cause kdcsetup to crash every single time I attempte
