Re: Netdiag error on Exchange test server 2000



Hi Kaddie,

Is this the error you are seeing with the same condition?

870692 You receive a "Kerberos does not have a ticket" error message when
you run Netdiag.exe on a Windows Server 2003-based member server in a
Windows 2000-based domain
http://support.microsoft.com/default.aspx?scid=kb;EN-US;870692

If so, the problem is with Netdiag and you can confirm the server has
Kerberos tickets using Klist.exe, as mentioned in the KB.

Hope this helps!
--
Eric Tam, MCSE, MCSA
Microsoft Exchange Support

Please do not send email directly to this alias. This alias is for newsgroup
purposes only.

This posting is provided "AS IS" with no warranties, and confers no rights.
"Kaddie" <kathied@xxxxxxxxxxxxxxxx(donotspam)> wrote in message
news:9BCAD3EA-8894-482A-A1C0-AA57FBE9594B@xxxxxxxxxxxxxxxx
Doing inplace upgrade of exch2000 to exch2003 and have similar setup in
test
environment. Ran netdiag and got kerberos does not have a ticket for
Exchange error message. All other tests pass and all dcdiag test pass.
Had same issue 2 years ago in same test lab when migrating from 5.5 to
exchange 2000 and was told it was OK to safely ignore this after extensive
research. Want to check again that I can ignore this and continue
--
Kath


.



Relevant Pages

  • [UNIX] Vulnerabilities in the Kerberos Version 4 Protocol
    ... Several cryptographic vulnerabilities exist in the basic Kerberos Version ... Kerberos realm and gain any privilege authorized through that Kerberos ... in a realm is sufficient to print any ticket in the realm. ... an attacker can cause the right text to be encrypted in a Kerberos service ...
    (Securiteam)
  • [Full-Disclosure] Vulnerabilities in the Kerberos version 4 protocol
    ... Several cryptographic vulnerabilities exist in the basic Kerberos ... Version 4 protocol that could allow an attacker to impersonate any ... that Kerberos realm. ... then the attacker can fabricate a ticket. ...
    (Full-Disclosure)
  • Re: Kerberized CIFS client?
    ... Debugging Kerberos can be a real PITA, as the MIT libs don't show too relevant ... DT>>> Is anyone aware of an alternate means of performing a mount via ... DT>>Try smbnetfs from ports. ... When your ticket expires you ...
    (freebsd-hackers)
  • Kerberised ssh only works if first command after kinit is telnet
    ... I am trying to set up a Kerberised authentication environment. ... FreeBSD 6.1 host. ... The Solaris 10 machine is acting as KDC and is running MIT Kerberos V 1.5.1. ... Ticket etype: des3-cbc-sha1, kvno 1 ...
    (comp.protocols.kerberos)
  • Re: Kerberized CIFS client?
    ... to a kerberos realm, if you are doing cross-realm authentication. ... kinit: NOTICE: ticket renewable lifetime is 1 week ... DT>>> Is anyone aware of an alternate means of performing a mount via ... When your ticket expires you ...
    (freebsd-hackers)