No Kerberos Tickets Generated

-

i'm trying figure out might causing 1 of servers in resource domain (trusting) not authenticate using kerberos.  second of 2 servers created in environment.  first server working correctly , kerberos tickets correct using klist.  when log second server, following:

using klist utility returns:

current logonid 0:0x19ea7c
error calling api lsacallauthenticationpackage (ticket granting ticket substatus): 1312

klist failed 0x8009030e/-2146893042: no credentials available in security package

on domain controller, see event logged seems using ntlm instead of kerberos

event id: 540
logon type: 3
logon process: ntlmssp
authentication package: ntlm 

 

in general, recommended create matching site names when operating in multi-forest environment. primary benefit of confgiuration ability localize cross-forest authentication - i.e. user domain b logs on computer in domain authetnicated dc domain b resides in same site local computer.

i'd expect kerberos auth to work regardless whether in place or not (although not in optimal manner). the change made led different domain controller trusted domain performing authentication - if want investigate further, i'd suggest focusing on checking dns name resolution/communication between server , authenticating dc...

hth
marcin

 



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Problem when changing update source

-
hi all, we use win server 2008 r2 enterprise , wsus 3.2. until last friday, downoloading updates microsoft's website. had change the source wsus server in our headquarters (not being replica server). started problem: our product , classification changed, downloading lot of updates hadn't ever downloaded. now, when try modify update soure (to microsoft's web site again) set option console falls down - database error - , copying error clipboard, have message bellow: the wsus administration console unable connect wsus server database.     verify sql server running on wsus server. if problem persists, try restarting sql.     system.data.sqlclient.sqlexception -- maximum stored procedure, function, trigger, or view nesting level exceeded (limit 32). info:spsetconfiguration - synctomu or upstreamservername config value changed - no reset source .net sqlclient data provider stack trace:    @ microsoft.updateservices.ui.admi...
Read more

Windows server 2012 r2 inplace upgrade failed

-
trying upgrade windows server 2012 2012r2 on physical box/nas (hosting vm's). this failed due "unknown error"? there several error logs, first few lines of 1 attached: setuperr.og (from c:\$windows.~bt\windows) 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user nt service\mssql$microsoft##wid. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user iis apppool\classic .net apppool. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:26:23, error      [0x0808fe] mig    plugin {0b23c863-4410-4153-8733-a60c9b1990fb}: loadlibraryex error (c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-textservicesframework-migration\imjpmig.dll) gle=126 2013-10-06 14:26:23, error      [0x0808fe] mig  ...
Read more