> Have you created a host principal for the machine in the KDB?
These are the following principal i have created in connection with
windows ....
host/[EMAIL PROTECTED] using this cmd (ank -pw password
host/windows.xyz.com)
[EMAIL PROTECTED] using (ank tom)
> Have you set the Kerberos Password on the machine using KSETUP?
Used the following cmds
C:> Ksetup /setdomain XYZ.COM
C:> Ksetup /addkdc XYZ.COM kdc.xyz.com
C:> Ksetup /setmachpassword password
i also created a user 'tom' in computer management and mapped the user
using the following cmds ...
C:> Ksetup /mapuser [EMAIL PROTECTED] tom
C:> Ksetup /mapuser * *
> Are there errors reported in the KDC log?
there are two entries in krb5kdc.log
Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): AS_REQ (7 etypes {23
-133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
etypes {rep=3 tkt=16 ses=1}, [EMAIL PROTECTED] for krbtgt/[EMAIL PROTECTED]
Mar 15 18:12:26 kdc.xyz.com krb5kdc[3820](info): TGT_REQ (7 etypes {23
-133 -128 3 1 24 -135}) 192.168.100.7: ISSUE: authtime 1110890546,
etypes {rep=1 tkt=16 ses=1}, [EMAIL PROTECTED] for
host/[EMAIL PROTECTED]:
> Are there errors reported in the Windows Event Log?
Logon Failure:
Reason: An unexpected error occurred during logon
User Name: tom
Domain: XYZ.COM
Logon Type: 2
Logon Process: User32
Authentication Package: Negotiate
Workstation Name: WINDOWS
just one more thing .. there is no active directory installed on the
windows client ...
any sugestions will help..
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
