Re: KRB_AP_ERR_MODIFIED

From: JustinNg (justinng_at_msn.com)
Date: 11/16/04 

Date: Tue, 16 Nov 2004 21:55:26 +0800

"Jörgen" <Jörgen@discussions.microsoft.com> wrote in message
news:8BC71ECF-E72D-4F77-AF7F-1421877D03A2@microsoft.com...
> The error below occurs periodically when running a webapplication (.net).
> The
> server is a Windows 2003 and the clients run Windows XP. It is a intranet
> with Windows integrated authentication.
>
> "The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
> host/pasp1h1.forsmark.se. This indicates..." Source: Kerberos, id=4.
>
> While you are using the webapplication a loginform popup periodically.
> Sometimes it works to login, but not always. If you leave the webform open
> in
> IE for about 30 minutes and then return and click some link the loginform
> always popup. It works for a while if you close and reopen IE.
>
> The iis applicationpool runs under a domain user because the
> webapplication
> needs to write files on a fileserver.
>
> We have a testserver where the webapplication works with no problems. I
> set
> up a new webserver but got the same problem. If I use the IP-adress
> instead
> of the servername in IE it seems too work. If the applicationpool runs
> under
> the Network service it also works.
>
> Thanks in advance for any help!
> //Jörgen
>
Kerberos is quite sensitive to connections that use user accounts to run
services. refer to
http://www.microsoft.com/resources/documentation/iis/6/all/proddocs/en-us/sec_auth_intwinauth_forcentlm.mspx

You can disable Kerberos and use NTLM instead by using vbscript or editing
the metabase.
cscript adsutil.vbs set w3svc/1/NTAuthenticationProviders "Negotiate,NTLM"

Relevant Pages

  • KRB_AP_ERR_MODIFIED
    ... The error below occurs periodically when running a webapplication. ... server is a Windows 2003 and the clients run Windows XP. ... The iis applicationpool runs under a domain user because the webapplication ...
    (microsoft.public.inetserver.iis.security)
  • Re: Simple FAX Sample TAPI
    ... I have got a big headache when developing a webapplication using Fax Service ... I made a Windows Application just to ... Because the fax just has a body file, and does not have cover page, does ... > See my TAPI and TSPI FAQ: ...
    (microsoft.public.win32.programmer.tapi)
  • List domains
    ... I am trying to list domains on windows 2003 active ... the server it doesnot return any domain name. ... If i install the same webapplication on different machine ...
    (microsoft.public.windows.server.active_directory)
  • special authentication
    ... My problem is quiet simple, but a solution seems to be difficult(for ... I've a group of users for my asp.net webapplication. ... login the User should be authenticated automaticly (this means the ... I've tried to set the authentication form on "Windows" in the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • unable to create webproject
    ... I try to create a webapplication in vs.net 2003 (under windows xp ... professional sp2 and sharepoint services) and then i get this error: ...
    (microsoft.public.vsnet.general)