No authority could be contacted for authentication

From: Jay (jshah_at_qualisci.com)
Date: 08/23/04

  • Next message: Jeff Cochran: "Re: ftp..." 
    Date: Mon, 23 Aug 2004 11:55:26 -0400

    I am having some kind of security problem which I don't understand. I have
    Windows 2003/iis6 as my web server which is hosting web application
    configured for integrated authentication (NT Authentication). My Domain is
    set on other Win2k server box with Active Directory and I am using fixed IP
    address to access my web application hosted on windows 2003 box.

    I am facing several problems:
    1) If I start 2003 box (webserver) and just leave it without logging in.
    Nobody can access web application from their respective PC's on LAN. Browser
    is asking for username/password again and again and not logging in.

    2) If I login on 2003 box using my domain account. only I can access web
    application. Other valid domain users are getting "No authority could be
    contacted for authentication." error.

    3) I always see following Error in 2003 box "Application Log" in event
    viewer.

    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1054
    Date: 8/20/2004
    Time: 11:00:25 AM
    User: NT AUTHORITY\SYSTEM
    Computer: Computer1
    Description:
    Windows cannot obtain the domain controller name for your computer network.
    (The specified domain either does not exist or could not be contacted. ).
    Group Policy processing aborted.

    Though domain is up and running and I can access this box over the network
    (LAN) from other boxes available in network.

    I would really appreciate any help

    Thanks Jay

  • Next message: Jeff Cochran: "Re: ftp..."

    Relevant Pages

    • Re: Loading windows xp...
      ... To see what NT services are rolled up into each instance of svchost, you need to use Process Explorer from SysInternals. ... You only need to have this NT service enabled and running if you use the firewall included in Windows or you run ICS. ... You might be able to use msconfig.exe or AutoRuns to find a startup entry for this. ... I have to wonder why you cannot decipher your own startup and running processes if you have the wherewithall to manage a web server and its pages. ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Who can play this wav file?
      ... I installed a new Windows 2000 and ... Look up the GDI+ security problem, the ZLIB security problem, the various ... Assuming no infection in the machine that is ...
      (microsoft.public.windowsmedia.player)
    • Re: SERVER ERROR
      ... Windows XP Home, then no MS Web server is supported. ... remove FP98 and the PWS and then install IIS via Add/Remove Window Components, ... I can open and edit from my website ...
      (microsoft.public.frontpage.client)
    • Re: Alternative process termination notification in a GUI
      ... I guess we all know that Windows is an asynchronous universe but most ... guts of an Apache web server or the like simply does not. ... The topic for this thread is another solution that fits another size ...
      (alt.lang.asm)
    • Re: windows 2003 domain controller, mod_auth_kerb in linux, issuewitt kerberos
      ... Windows AD accounts require "allow this account to be trusted for delegation" to have Internet Explore actually delegate credentials to the web server Try turning this off and see if it does what you want. ...
      (comp.protocols.kerberos)