Re: Kerberos authentication problems

From: Olu Adedeji (OluAdedeji_at_discussions.microsoft.com)
Date: 12/23/04 

Date: Thu, 23 Dec 2004 03:13:01 -0800

The policy you want is 'impersonate a client after authentication'

"Olu Adedeji" wrote:

> Hi Vince,
>
> I think this is an issue with DB's WIN2K3 build
> not sure (PS. I work for DB in London)
>
> but this is not documented by MS anywhere, however if you add the sqlserver
> service account to the local security policy user 'allow authenticated users
> to be trusted for delegation' (I will confirm the exact permissions but
> there are 2 in slightly similar, unfortunatetly I am at home and don't have
> a win2K server accessible right now )
> this will solve your problem.
>
>
> "Kevin McDonnell [MSFT]" <kevmc@online.microsoft.com> wrote in message
> news:$A0qZIH6EHA.1392@cpmsftngxa10.phx.gbl...
> > Has the password of the service account been changed?
> > Has the service account for SQL been restarted?
> >
> > Thanks,
> >
> > Kevin McDonnell
> > Microsoft Corporation
> >
> > This posting is provided AS IS with no warranties, and confers no rights.
> >
> >
> >
>
>
>

Relevant Pages

  • Re: LDAP Authentication for Single Sign On
    ... So no authentication is required when performing bind operations only ... If I do find that I have to create a service account can you steer me ... If the client doesn't support anything other than a simple ... That isn't really necessarily part of the authentication though. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SBS Wireless policy
    ... I clicked Edit Profile, went to the authentication ... I clicked OK until I was back at the Connections to ... I then setup the WAP to use WPA-EAP and the raduis server. ... tab I just set the policy to Grant access, ...
    (microsoft.public.windows.server.sbs)
  • Re: Issues with IAS/802.1x authentication
    ... from the event below you need to modify the policy on IAS server (the policy ... name from the event below is:"Connections to other access servers". ... and select "Grant remote access permission" ... When I check the eventlog I find the IAS> server is throwing up a heap of authentication errors, ...
    (microsoft.public.internet.radius)
  • Re: Wireless Re-Authentication
    ... Change the policy to something like windows groups and see what happens. ... > Reason = The authentication request was not processed because it contained> a Remote Authentication Dial-In User Service message that was not ... > The connection request policy in the IAS settings contains the NAS types> 802.11 and "other" as the only attribues. ...
    (microsoft.public.internet.radius)
  • Policy for my websense filter
    ... Wondering how can I set up my ISA Policy for my websense filter, ... Enabled Integrated Authentication in my ISA and IE 6.0/7.0 ...
    (microsoft.public.isa)