Re: Slow Logon Issue

Hello Babu,

Nice to hear that you found it.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Thanks Meinolf ,
Sorted the problem just now... It was not a port issue rather kerberos
was
talking in UDP port.I was advised in one of the KB article to use TCP
for
kerberos in WAN environments.
Forcing Kerberos to talk in TCP solved the issue.Thanks for your help
anyways for the excellent link you provided.
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66122828cb3eee411155a8@xxxxxxxxxxxxxxxxxxxxxxx

Hello Babu,

What ports did you open on the firewall? See here about ports needed
to be
open:
http://support.microsoft.com/kb/555381
Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Hi,
I have member servers separated from Domain Controllers using
firewall.Now
when I login into the member servers,I get stuck at "Applying
computer
settings" for over 15mins and finally allows me in.Below is the msg
which I
gathered from the server,
EventID: 10
"The kerberos subsystem is having problems fetching tickets from
your
domain
controller using the UDP network protocol.This is typically due to
network
problems."
EventID:40960
The security system detected an authentication error for the server
cifs/<DC_NAME>.The failure code from authentication protocol
Kerberos
was
"There are currently no logon servers available to service the logon
request.(0x000005e)
Can you please help!
cheers
Babu


.

Relevant Pages

  • Re: What part of the DNS are Site DC stored.
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... three _ladap servers under the one Site. ...
    (microsoft.public.windows.server.dns)
  • Re: Merging 3 Domains into 1 domain
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Current set up is 9 servers some virtual split across three sites. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Event ID 7010 between EX2003 servers
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > Any ideea why suddenly this message? ... > between 2003 servers and in the same domain. ...
    (microsoft.public.exchange.connectivity)
  • Re: DC/ DNS Upgrade to 2003
    ... This posting is provided "AS IS" with no warranties, and confers ... no rights. ... The servers are just DC/DNS, no other application are installed on ...
    (microsoft.public.windows.server.active_directory)
  • Re: kerberos 5
    ... This posting is provided "AS IS" with no warranties, and confers no ... You assume all risk for your use. ... All rights ... our customer asks us to integrate kerberos 5 into the kernel. ...
    (microsoft.public.windowsce.platbuilder)
Loading