Select the product you need help with

When you use an account from an external MIT Kerberos realm to log on to a Windows Vista-based workstation, the logon fails

Article ID: 947707 - View products that this article applies to.

SYMPTOMS

When you use an account from an external Massachusetts Institute of Technology (MIT) Kerberos realm to log on to a Windows Vista-based workstation, the logon fails.

Note You can use the same account to log on to a Windows XP-based workstation.

Back to the top | Give Feedback

CAUSE

This issue occurs because of a known issue in older versions of the MIT Kerberos protocol. When a logon request is received from a client computer that contains a newer encryption type, the Key Distribution Center (KDC) responds with an ETYPE-INFO2 field in the Authentication Service Replies (AS-REP). In older versions of the MIT Kerberos protocol, a problem exists that would cause the KDC to respond with an incorrect encryption type. This behavior is documented in Request for Comments (RFCs) 4120, "The Kerberos Network Authentication Service (V5)."

Windows XP-based clients do not experience this issue because Windows XP does not support the new encryption types that trigger this response.

Back to the top | Give Feedback