Check the date and time (and time zone) of the client computer. If it is more then a certain time difference then kerberos will exclude it. Like an hour out is a "bad thing"
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cook, David Sent: Friday, 5 November 2004 5:16 p.m. To: Exchange Discussions Subject: Kerberos problem with a few users Hello all, I have a problem with a few users that I can not figure out. I am running Exchange 2003 SP1 in native mode with Windows 2003 AD in native mode and Outlook 2003. The problem is that this user can not logon using OWA. She gets an error saying "Bad Request (Request Header Too Long)". If I turn on Friendly HTTP errors then the error is "HTTP 400 - Bad Request". This user also can not open their mailbox from the client when logged on to a computer on the domain. If I change the profile to use "Password Authentication (NTLM)" rather than "Kerberos/NTLM Password Authentication" then she can get into her mailbox. If I give myself full control of her mailbox and set it to prompt for credentials with "Kerberos/NTLM..." then I can get into the mailbox with no problem. I have used LDP to compare attributes with other an account that works fine but I don't see any major difference other than things that should be different. This leads me to believe the problem is related to Kerberos. Any idea what I can do to resolve this issue? Dave Cook Exchange Administrator Creighton University - DoIT 402-280-3824 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. ********************************************************************** Have you clicked on yet? www.nrc.govt.nz ********************************************************************** NORTHLAND REGIONAL COUNCIL This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify [EMAIL PROTECTED] ********************************************************************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
