List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: RE: [ActiveDir] IE refuses to do Kerberos for one particular user / workstation / web server combo

Prev Next

You are not authorized to post a reply.

Author

Messages

amzweg

Posts:3

09/24/2008 3:45 PM
Was the UPN changed AFTER the user had logged on to the machine and thus was using cached credentials? Because we have experienced issues when changing the UPN and then a user logs on to the machine, the client is using the cached credentials and this has a different UPN registered and because of this was unable to access Outlook for example. (are there other services that can no longer be accessed?) Do you have access to the website? - can you see the logging on the Web server to see what user credentials the website believes that the user is trying to access the website with? Met vriendelijke groet / Kind Regards, Arno Zwegers \| Architect Infrastructure www.avanade.com Avanade /systems.solutions.success/from Accenture & Microsoft -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Thommes, Michael M. Sent: Wednesday, September 24, 2008 18:37 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] IE refuses to do Kerberos for one particular user / workstation / web server combo We've had a similar problem in the past - a particular userid, on a particular computer, going to a particular web site fails with presented credentials. The same user on a different computer gets into the web site just fine. I believe that the stored user certificates (corrupted?) are removed when the profile is removed. A new profile rebuilds them. Mike Thommes -----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Joe Kaplan Sent: Wednesday, September 24, 2008 11:26 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] IE refuses to do Kerberos for one particular user / workstation / web server combo I'm curious as to why this step would fix this problem. Does anyone know more details about what this fixes? Joe K. ----- Original Message ----- From: "Michael B Allen" <ioplex@gmail.com> To: <ActiveDir@mail.activedir.org> Sent: Wednesday, September 24, 2008 10:25 AM Subject: Re: [ActiveDir] IE refuses to do Kerberos for one particular user / workstation / web server combo > On Tue, Sep 23, 2008 at 11:16 PM, Ken Schaefer <Ken@adopenstatic.com> > wrote: >> I would try doing this first (recreate profile) > > That fixed it. So either the profile was corrupted or there was some > obscure setting associated with it that was breaking Kerberos. > > Thanks, > Mike > > -- > Michael B Allen > PHP Active Directory SPNEGO SSO > http://www.ioplex.com/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > RE: [ActiveDir] IE refuses to do Kerberos for one particular user / workstation / web server combo

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads