S
Tue Jun 05 04:00:18 CDT 2007
How I diagnose Kerberos issues:
1. Verify SPN in question. as I said, use ADSIedit to check that (the LDAP
attribure you are looking for is "servicePrincipalName");
2. Enable Kerberos logging on the DCs
(
http://support.microsoft.com/kb/262177/) and look for relevant information
in the logs;
3. Capture traffic on the client requesting Kerberos ticket and see Kerberos
communications and error codes in the capture;
4. Review Q326985 (
http://support.microsoft.com/kb/326985) -it's about
troubleshooting Kerberos with IIS but gives good idea about other services.
--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-
*
http://sl.mvps.org *
http://msmvps.com/blogs/sp *
<shruti.dabhade@gmail.com> wrote in message
news:1180964910.511209.109090@x35g2000prf.googlegroups.com...
> Hi,
>
> Thank you for the reply.I tried finding my SPN and tried using
> that,but it is still giving that error. Do you think something might
> be occuring at n/w level that I am not aware of/have no access to. I
> would be glad to know your thoughts on this.
> And anybody who can help me :)
>
> Regards,
> Shruti
>
>
>
> On Jun 4, 1:45 pm, "S. Pidgorny <MVP>" <slavi...@yahoo.com> wrote:
>> G'day,
>>
>> SPN host/ps442@PERSISTENT doesn't look right. It should be s/thing like
>> host/ps422.persistent....@PERSISTENT.COM. Use ADSI editor to check SPN
>> registered for that host.
>>
>> --
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> *
http://sl.mvps.org*http://msmvps.com/blogs/sp*<shruti.dabh...@gmail.com>
>> wrote in message
>>
>> news:1180936894.992367.111310@d30g2000prg.googlegroups.com...
>>
>> > Hi,
>>
>> > I am tryin to work with Web Service Enhancement 2.0 to use Kerberos
>> > token. I have Windows XP SP2 installed on my m/c which is connected in
>> > an Active Directory Domain.
>>
>> > When I try to execute the following code :
>> > KerberosToken kerbToken = new KerberosToken( "host/" + "ps4442" + "@"
>> > + "PERSISTENT");
>>
>> > I get this error -
>>
>> > "An unhandled exception of type 'System.Security.SecurityException'
>> > occurred in microsoft.web.services2.dll
>>
>> > Additional information: The Kerberos credential handle could not be
>> > acquired. The AcquireCredentialsHandle call returned the following
>> > error code: The parameter is incorrect."
>>
>> > What can I do to avoid getting this error? I am not understanding at
>> > all. I also tried investigating AcquireCredentialsHandle, but couldn't
>> > understand what is going wrong.
>> > What should I do? Can anybody help?
>>
>> > Regards,
>> > Shruti
>
>
>