Re: [ActiveDir] Kerberos Question

2007-01-25 Thread Al Mulnick
It could also mean you have a problem with the tool, right? Are you seeing some other symptoms that caused you to look at this tool? Time? you can check that pretty easily by checking the time on your machine and comparing to a DC in your environment. What do you see in your system event log?

RE: [ActiveDir] Kerberos Question

2007-01-25 Thread Mike Hogenauer
PROTECTED] On Behalf Of Al Mulnick Sent: Thursday, January 25, 2007 11:24 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Kerberos Question It could also mean you have a problem with the tool, right? Are you seeing some other symptoms that caused you to look at this tool? Time? you

RE: [ActiveDir] Kerberos Question

2007-01-25 Thread Thommes, Michael M.
I think you are seeing your Kerberos tickets start to reach their expiration time. The kerbtray icon will go from green to red. I think the last 5 or 15 minutes the default configuration will also issue an audible (and very distinctive) sound. The tickets will renew automatically (and the icon

RE: [ActiveDir] Kerberos Question

2007-01-25 Thread Mike Hogenauer
Cool - sounds good to me! From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Thursday, January 25, 2007 11:39 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Kerberos Question I think you are seeing your Kerberos tickets start to reach

RE: [ActiveDir] Kerberos Question

2007-01-25 Thread Ryan A. Conrad
Subject: RE: [ActiveDir] Kerberos Question The Time is the same on the PDC emulator as my PC - no event logs I could find - I guess it might be a problem with the tool - I don't have any firewalls between my PC and the DC. The loss of the ticket information is what raised the flag for me. From

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Gasper, Rick
: RE: [ActiveDir] Kerberos question Before going any further, how about trying to get the information from a 5.5 server locally using the admin utility? The goal of looking there is to isolate whether the problem is on the 5.5 side or if the problem is elsewhere; just need to rule out there's

RE: [ActiveDir] Kerberos question

2004-08-05 Thread joe
] On Behalf Of Gasper, RickSent: Thursday, August 05, 2004 9:49 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Kerberos question It is also windows 2003, but the software is a web app (webct). I am confused as the whether the OS it doing the authentication or the app is. Rick Gasper Manager

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Gasper, Rick
[EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Thursday, August 05, 2004 10:44 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Kerberos question Sorry Rick. Thread overlap. :) Whether or not you need to make a change depends

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Gasper, Rick
] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, August 05, 2004 11:15 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Kerberos question I would contact the vendor. They should know. There should be nothing extra you have to do to support kerberos on your

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Ken Cornetet
Title: Message Your local liquor store is a good place to start, followed by the drug store for a few gallons of Maalox. Kerberos interoperability is a pain. It is possible, but you will have to do LOTS of research. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Mulnick, Al
PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, AlSent: Thursday, August 05, 2004 10:44 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Kerberos question Sorry Rick. Thread overlap. :) Whether or not you need to make a change depends

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Mulnick, Al
http://support.microsoft.com/default.aspx?kbid=326985 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gasper, RickSent: Thursday, August 05, 2004 2:41 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Kerberos question Question,: is there a utility that would use Kerberos

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Gasper, Rick
: Thursday, August 05, 2004 2:54 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Kerberos question There are tools to monitor kerberos conversations (capture), but I think you're likely better off using success/failure audit logging to see what's going on, what's being attempted

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Mulnick, Al
Title: Kerberos question This stands out Pre-authentication failed: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gasper, RickSent: Thursday, August 05, 2004 3:24 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Kerberos question The program uses apache, I am still

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Gasper, Rick
] On Behalf Of Mulnick, Al Sent: Thursday, August 05, 2004 3:45 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Kerberos question This stands out Pre-authentication failed: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gasper, Rick Sent: Thursday, August 05, 2004 3

RE: [ActiveDir] Kerberos question

2004-08-05 Thread joe
: Thursday, August 05, 2004 3:24 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Kerberos question The program uses apache, I am still working with the vendor on this. This is the error from the DC: Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID

RE: [ActiveDir] Kerberos question

2004-08-05 Thread Gasper, Rick
] Subject: RE: [ActiveDir] Kerberos question I am looking that up now Rick Gasper Manager, Network Services King's College 133 N. River St Wilkes-Barre PA 18711 PH: 570-208-5845 Fax: 570-208-6072 Cell: 570-760-0335 [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto