Re: Kerberos not working across domains
- From: metric_thumbs <mknight@xxxxxxxxxx>
- Date: Mon, 24 Sep 2007 09:04:51 -0700
Thanks for the response, Joe
Definitely no object with the same name.
I have since cleared out all DNS and DHCP records not used, checked
root hints and forwarders, and generally go through everything I can
think of - yet still the same. I have added a second XP client to the
BDA domain (the one without the SharePoint and Cube servers) and still
get the error within the web part at the sharepoint in teh browser
"The security database on the server does not have a computer account
for this workstation trust relationship. ."
Running kerb tray I can see a set of tickets issued that at first
sight look OK.
On the XP machine in the ShareP domain and displaying correctly:
e4se.net
cifs/salesdom.e4se.net
host/lassie.e4se.net
HTTP/muttley.e4se.net
krbtgt/E4SE.net
krbtgt/e4se.net
LADP/salesdom.e4se.net
ldap/salesdom.e4se.net/e4se.net
On the XP machine part of the BDA.FORD.NET domain the kerbtray results
are as follows
BDA.FORD.NET
cifs/soter.bda.ford.net
krbtgt/soter.bda.ford.net
krbtgt/soter.bda.ford.net
krbtgt/e4se.net
LADP/soter.bda.ford.net
ldap/soter.bda.ford.net/bda.ford.net
E4SE.net
HTTP/muttley.e4se.net
(soter is the domain controller for bda.ford.net, and lassie is the XP
machine)
So I would appear to be getting a ticket from the e4se domain and it
is presented against muttley, but the original error
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error:
Client Realm:
Client Name:
Server Realm: BDA.FORD.NET
Server Name: MSOLAPSvc.3/Dingo
Target Name: MSOLAPSvc.3/Di...@xxxxxxxxxxxx
Indicates to me that the OLAP server needs defining, somehow so that
the ticket knows it is in E4SE.net!!
Any comments welcome.
Thanks
.
- Follow-Ups:
- Re: Kerberos not working across domains
- From: Joe Kaplan
- Re: Kerberos not working across domains
- References:
- Kerberos not working across domains
- From: metric_thumbs
- Re: Kerberos not working across domains
- From: Joe Kaplan
- Kerberos not working across domains
- Prev by Date: Re: Where are Trusted Sites listed in Group Policies?
- Next by Date: Re: Load Balancing On ADs
- Previous by thread: Re: Kerberos not working across domains
- Next by thread: Re: Kerberos not working across domains
- Index(es):
Relevant Pages
|