Re: Kerberos Auth using O2k3 and E2k3 in a cluster
From: Rich Matheisen [MVP] (richnews_at_rmcons.com.NOSPAM.COM)
Date: 01/08/05
- Next message: Doug Frisk: "Re: Kerberos Auth using O2k3 and E2k3 in a cluster"
- Previous message: Lanwench [MVP - Exchange]: "Re: Exchange Email in a Domain and Website in another domain"
- In reply to: Steve: "Re: Kerberos Auth using O2k3 and E2k3 in a cluster"
- Next in thread: Doug Frisk: "Re: Kerberos Auth using O2k3 and E2k3 in a cluster"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 08 Jan 2005 11:09:34 -0500
"Steve" <sasteph@msn.com> wrote:
>We have tried this registry modification before with no sucesses. We can
>authenticate to our LCS and our DC using kerberos; it's just the Exchange
>servers. We do have one Outllok profile that works, and if you bring up the
>connection status dialog box it shows connections direcly to the domain
>controller as opposed to the other machines which show connections to the
>Exchange server.
Outlook 2003 (and XP, and maybe 2000 -- I forget) can "talk" directly
to a GC. They may ask the Exchange server for a GC name, though. The
DSProxy service on the Exchange server can also be used. It just
passes through the information to the GC and passes back the results
to the client.
>The strange thing is that on the same client machine if we
>create an identical Outlook profile using kerberose only it will not
>authenticate.
So only NTLM authentication works?
How about this KB?
Description of the Properties of the Cluster Network Name Resource in
Windows Server 2003 [302389]
If you've disabled the use of UDP by kerberos (by setting the max
packet size to 1 byte), followed the above KB, and the client still
fails to authenticate using kerberos, I'd call MS (or check routers
for packet filters, IPSec for port blocking, etc.). I'd also
doublecheck the registry modification to make sure the key and data
names are spelled correctly. Sometimes the names are case-sensitive .
. . sometimes they aren't.
-- Rich Matheisen MCSE+I, Exchange MVP MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
- Next message: Doug Frisk: "Re: Kerberos Auth using O2k3 and E2k3 in a cluster"
- Previous message: Lanwench [MVP - Exchange]: "Re: Exchange Email in a Domain and Website in another domain"
- In reply to: Steve: "Re: Kerberos Auth using O2k3 and E2k3 in a cluster"
- Next in thread: Doug Frisk: "Re: Kerberos Auth using O2k3 and E2k3 in a cluster"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
