Hi JM might be a dns error. The Client (user) has to guess the realm to the service and often uses dns (for example TXT records) or some registry entry (HostTorealm) to determine the KRB REALM for the service (in this case the local login).
Try to wireshark what DNS request a win XP Machine does, when you try to login using Cross Realm Trust Do the same on the Windows 7 Machine. When testing Cross-Realm trust several months ago I had the impression MS changed something there, but i didn't really finish this. Actually it doesn't read out TXT Records which worked fine for WinXP. If you find out something, pleas tell me. Robert. Am 24.08.2011 14:06, schrieb jm130794: > I used wireshark to find why my connection fails. It seems that AD returns > the error KDC_ERR_WRONG_REALM. It's weird that I can connect to the server and > not on the client! > > Regards, > > > JM > > 2011/8/24 jm130794 <[email protected]> > >> Hello >> >> I installed a cross realm between my MIT and an AD. I can open a session on >> my AD server with a principal defined in my MIT Kerberos (eg user1). >> >> I added a Windows Seven to my Microsoft Domain. I can open a session on >> this station with the Domain Administrator Domain without problem. >> >> When I try to open a session with user1 (MIT principal), that doesn't >> work... >> >> Any idea ? >> >> Thanks, >> >> JM >> >> > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos -- Dr. Robert Wehn ........................ http://www.rz.uni-augsburg.de Universität Augsburg, Rechenzentrum ............. Tel. (0821) 598-2047 86135 Augsburg .................................. Fax. (0821) 598-2028 ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
