|
Home > Archive > IIS Server Security > April 2005 > Front Page cannot connect due to Kerberos failure
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Front Page cannot connect due to Kerberos failure
|
|
| Matthew Bando 2005-04-13, 5:59 pm |
| I have a two domain environment with a domain MASTER and a subdomain
INTERNET. User accounts are in MASTER, and a WIndows 2003 Server with IIS 6
is in INTERNET.
Users can log onto the conolse of the server, and they can Terminal Service
in using their accounts from the MASTER domain.
However, when they attempt to connect to this IIS 6 server via Front Page,
their MASTER accounts do not work and the following appears in the system log
for the server:
Event ID: 7, Source: Kerberos, Description: The Kerberos subsystem
encountered a PAC verificatino failure. This indicates that the PAC from the
client MBAnd in realm MASTER.Blah.com had a PAC which failed to verify or was
modified. Contact your system administrator.
I have tried the fix referenced in KnowledgeBase article: 883268 but all
these servcies appear to be running as SHARED.
Any ideas?
Thansk,
Matt
bandom@(remove) csctechnologies.com
| |
| Matthew Bando 2005-04-16, 5:49 pm |
| Removed the server frmo the Active Directory domain, and then added it back
and everything is fine.
"Matthew Bando" wrote:
> I have a two domain environment with a domain MASTER and a subdomain
> INTERNET. User accounts are in MASTER, and a WIndows 2003 Server with IIS 6
> is in INTERNET.
>
> Users can log onto the conolse of the server, and they can Terminal Service
> in using their accounts from the MASTER domain.
>
> However, when they attempt to connect to this IIS 6 server via Front Page,
> their MASTER accounts do not work and the following appears in the system log
> for the server:
>
> Event ID: 7, Source: Kerberos, Description: The Kerberos subsystem
> encountered a PAC verificatino failure. This indicates that the PAC from the
> client MBAnd in realm MASTER.Blah.com had a PAC which failed to verify or was
> modified. Contact your system administrator.
>
> I have tried the fix referenced in KnowledgeBase article: 883268 but all
> these servcies appear to be running as SHARED.
>
> Any ideas?
>
> Thansk,
>
> Matt
> bandom@(remove) csctechnologies.com
|
|
|
|
|