problem with kerberos
Good Day ,
I migrate Domaine controller from windows 2003 to windows 2008R2 , i changed the password of the administrator but after this the proxy server (linux) is not working give me this error :
[2011/11/15 08:48:50, 0] libads/kerberos.c:ads_kinit_password(356)
kerberos_kinit_password Administrateur@DOMAINE.COM failed: KDC has no support for encryption type
Failed to join domain: failed to connect to AD: KDC has no support for encryption type
The question maybe i need to disable something in windows 2008 R2 about kerberos , let the system synchronise each other ?
Many Thanks
November 17th, 2011 9:49am
Hello,
Have you restarted your proxy server ? If not, please do so.
I am not a Linux Admin though ;-) however, I have some general suggestions.
If server restart doesn't help, try following
Reset Domain Admin password one more time and try to join the proxy server back to domain.
Make sure, host entries on your proxy server are pointing to the Migrated Domain.
Similarly, NTP settings are updated and time is in sync with your new Domain Controller.
For more help, you might want to create a thread in Linux forums (depending on your Linux Flavour).
Also please refer below, similar issue has been discussed in that thread, which might help you...
http://ubuntuforums.org/archive/index.php/t-91510.html
Good luck.
Free Windows Admin Tool Kit Click here and download it now
November 17th, 2011 3:38pm
Hi,
I would like to confirm that do you have DES encryption in use?
By default, Data Encryption Standard (DES) encryption for Kerberos authentication is disabled in Windows 7 and in Windows Server 2008 R2.
If so, please refer to the following Microsoft KB article to add support for DES encryption algorithms.
KDC Event ID 16 or 27 is logged if DES for Kerberos is disabled
http://support.microsoft.com/kb/977321
Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 21st, 2011 5:00am
Thank you I enabled the
Data Encryption Standard (DES) encryption for Kerberos authentication in windows2008 R2 and I restart the server also the proxy server I restarted but stay the same problem ???
e
Free Windows Admin Tool Kit Click here and download it now
November 22nd, 2011 8:09am
Have you checked these links:
http://support.microsoft.com/kb/978055
http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/f31ab749-064f-400f-901a-4a255ad0fb4f/MCTS - Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
December 29th, 2011 7:05pm
1. Sorry to say,but it is Squid problem. See article on this problem here
http://squid-web-proxy-cache.1019090.n4.nabble.com/proxy-not-working-td4042437.html
For more details refer to Squid forum
2. If you want to go into detail analysis, use network monitor to catch the network traffic and make use of following articles
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21820
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21820
Regards
Milos
Free Windows Admin Tool Kit Click here and download it now
January 3rd, 2012 9:32am