Hi managers,
I’ve installed Windows 2000 Single Sign On V2.0 on V5.1.
I’m able to use kinit, klist with my ActiveDirectory W2K server.
Any attempt to use creacct yields in an
Unable to obtain a TGT for the Admin principal.
Please, check your credentials then try again.
The admins rights are o.k. (I used it successfully with v1.0). Also
the ldapcd can’t get a kerberos ticket:
Oct 25 14:26:25 xm00 ldapcd[82985]: ldapcd started
Oct 25 14:26:28 xm00 ldapcd[82985]: can't get initial kerberos ticket
Oct 25 14:26:28 xm00 ldapcd[82985]: kerberos init failed - using simple auth
At the security log on the W2K server there appears a fault entry for any
attempt
Unknown user xm00 or wrong password
This is a new behavior (not there in v1.0) and there is no entry for the
admin account
(neither successful nor unsucc.) – only for the machine name (here xm00).
I’ve tried this from several hosts – always the same behavior.
Anyone here who can help?
regards,
Rudi Gabler
email: rug_at_usm.uni-muenchen.de <mailto:rug_at_usm.uni-muenchen.de>
WorldWideWeb: Rudi Gabler
<
http://www.usm.uni-muenchen.de/people/rug/rug.html>
Received on Thu Oct 25 2001 - 13:10:23 NZDT