??????? ??????? ???????? Kerberos ??????? ??????? KDC ?? ???? ??????? Windows Server 2003

?????? ????????? ?????? ?????????
???? ???????: 837361 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

????? ??? ??????? ??? ??????? ??? ??????? ????? ???? ????? ???????? ?????? ??????? ?????? ?? Kerberos ?? ???? ??????? Windows Server 2003.

?????

???? Kerberos ???? ?????? ????????? ?????? ?? ???? ?????? ?? ????????. Kerberos ?? ????? ?????? ?????? ????? Windows Server 2003.

??? ??? ???? ?????? Windows Server 2003 ????? ????? ???????? Kerberos ???????? ?? ??????? ????? ???????? Kerberos ?????? ???????? ?? ??????? ???????? Kerberos. ?????? ????? ?? ?????? ?? ????? ??????? ????? ??????? "???? ?? ?????????" ?? ??????.

??????? ????

??? ??? ?????? ?? ????? ?? ?????? ??? ????? ?????? ?? ????? ????? ???????. ??? ???? ?? ???? ?????? ????? ?? ???? ????? ????? ?????? ??? ?????. ?????? ??? ?????? ?? ???? ??????? ??????? ??????. ??????? ??????? ??? ???? ???????? ?? ????? ??? ??????. ??? ???? ????? ??????? ????? ?? ???? ???? ?????. ????? ?? ????????? ??? ????? ??? ???? ???????? ?? ????? ????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft" (????? ?? ??? ???????? ??? ???? ?? ???? ??????? ??? ?? ??? ??? ?????? ??????????):
322756????? ??? ???? ???????? ????????? ?? Windows
?????? ??? ???????? ?? ??????? ??????? ???????? ?? ?????? Kerberos ?? ?????????? ?? ?????? ??? ??????? ??????? ???? ??? ????????. ????? ?? ?? ????? ???? ?????????.

??????? ??????? ???? ??? ????? ??????

??? ????? ??????? ????? ??????? ?? ??? ????? ??? ????? ??????? ?????? ??????:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters
?????? ??? ??? ????? ?????? ??? ???? ??? Kerberos ? ??? ????? ???????.
  • ???????: SkewTime
    ?????: REG_DWORD
    ?????? ??????????: 5 (?????)

    ??? ?????? ?? ???? ?????? ??????? ????? ???? ????? ??? ????????? ?????? ??????? ???? Kerberos ????????. ?? ???? ??????? Windows 2000 ??? ??????? ???? SkewTime ?????? ?????? ??????????.

    ?????? ??? ??????? ????? ???? ????? ?? ???? ??????? Windows ?? ????? ????? ????????. (???? ????? ????? ????? ????? ?????.) ????? ???? ????? ??? ??????? ?????? ??????? ??????? ????? ?????. ??? ??? ???? ?????? ????? ??? ?????? ?? ?????? ??????. ????? ??? ????? ?????? ?? ?????? ??????? ?? ???? ??????? ???????? ??? ????? ????? ??????. ????? ??? ????????? ??????? ??? ??????? ?????? ??? ????? ??? ????? ????? ????? ??????. ????? ??? ???? ????? ???? ??????? ?? ??? ??????? Windows ???????? ???????.

    ?? ??? ??????? Windows ???????? ??????? ????? ???? ????? ???? ????? ???? ??? ?? ????? ?????? ????? ????????. ?? ???? ???? ??? ??? ????? ??????? ??????? ?? ????? Windows ?? ??????? ?????? ??????? ??????? ??????. ????? ????? ??? ???? ??????? ????? ??? ?? ????? ???? ?????? ????.
  • ???????: LogLevel
    ?????: REG_DWORD
    ?????? ??????????: 0

    ???? ??? ?????? ??? ?? ??? ??? ??? ????? ??????? ?? ??? ????? ??????. ??? ?? ????? ??? ?????? ??? ?? ???? ??? ????? ? ??? ????? ???? ??????? ???????? ?? Kerberos ?? ??? ????? ??????.
  • ???????: MaxPacketSize
    ?????: REG_DWORD
    ?????? ??????????: 1465 (????)

    ??? ?????? ?? "???????? ???? ?????? ????????" ???? ?????? ???? ?????? (UDP). ??? ????? ??? ?????? ??? ??????, ??? ??????? TCP.
  • ???????: StartupTime
    ?????: REG_DWORD
    ?????? ??????????: 120 (?????)

    ??? ?????? ?? ????? ???? ????? Windows ???? ????? ???????? (KDC) ???? ??? ???? Windows.
  • ???????: KdcWaitTime
    ?????: REG_DWORD
    ?????? ??????????: 10 (?????)

    ??? ?????? ?? ????? ???? ????? Windows ??????? KDC.
  • ???????: KdcBackoffTime
    ?????: REG_DWORD
    ?????? ??????????: 10 (?????)


    ??? ?????? ?? ????? ??? ??????????? ????????? ??? KDC ??? ??? ??????? ????.
  • ???????: KdcSendRetries
    ?????: REG_DWORD
    ?????? ??????????: 3

    ??? ?????? ?? ??? ?????? ???? ????? ???? ??????? ??????? ??? KDC.
  • ???????: DefaultEncryptionType
    ?????: REG_DWORD
    ?????? ??????????: 23 (????) ?? 0x17 (????? ????)

    ???? ??? ?????? ??? ??? ??????? ?????????? ???????? ???????.
  • ???????: FarKdcTimeout
    ?????: REG_DWORD
    ?????? ??????????: 10 (?????)

    ??? ?? ???? ?????? ???? ??????? ?? ???? ???? ???? ?? ???? ??? ?? ????? ??????? ?????? ???? ???? ?????? ??? ?????.
  • ???????: NearKdcTimeout
    ?????: REG_DWORD
    ?????? ??????????: 30 (?????)

    ??? ?? ???? ?????? ???? ??????? ?? ???? ???? ???? ?? ?????? ???? ?? ????? ??????? ?????? ???? ???? ?????? ??? ?????.
  • ???????: StronglyEncryptDatagram
    ?????: REG_BOOL
    ?????? ??????????: FALSE

    ????? ??? ?????? ????? ??????? ??? ?? ??? ??? ??? ??????? ????? 128-?? ??? ?????? ????????.
  • ???????: MaxReferralCount
    ?????: REG_DWORD
    ?????? ??????????: 6

    ??? ?????? ?? ??? ??????? KDC pursues ???? ??? ??? ???? ?????? ?????.
  • ???????: KerbDebugLevel
    ?????: REG_DWORD
    ?????? ??????????: 0xFFFFFFFF

    ??? ?????? ?? ????? ???????? ???? ???? ??? ????? ? ??? ????? ????? ????. ???? ??????? ??? ????? ?? ????? ?????? ??? ????? ?????? Kerberos ?????? ????? ??????? ?? ???? ?? ???? ?? ????? ??????? ???? ?? ????? ?? ?????? ??????.
    ?? ??? ??????????? ??? ??????
    ??? ?????????????????
    deb_error0x00000001??? ?? ??????? ????????? InfoLevel ?? ??????? ?????? ????. ???? ??? ?? ????? ????? ??? ????????.
    deb_warn0x00000002???? ??? ??????? ????? ??????? ??? ????????. ?? ??? ???????? ???? ????? ??? ???????.
    deb_trace0x00000004????? ??? ??????? ?????? ???? ???????.
    deb_trace_api0x00000008????? ??? ??????? ???????? API ???? ??????? ???? ???? ????? ??? ????? ???? ????? ???? ?? ??????? ??????? ??? ????? ???? SSPI.
    deb_trace_cred0x00000010????? ??? ??????? ???? ?????? ????????.
    deb_trace_ctxt0x00000020????? ??? ??????? ???? ??????.
    deb_trace_lsess0x00000040????? ??? ??????? ???? ???? ????? ??????.
    deb_trace_tcache0x00000080?? ??? ?????
    deb_trace_logon0x00000100????? ??? ??????? ???? ????? ?????? ??? ?? LsaApLogonUserEx2().
    deb_trace_kdc0x00000200????? ??? ??????? ?????? ??? ???? ????????? KerbMakeKdcCall().
    deb_trace_ctxt20x00000400????? ??? ??????? ???? ?????? ??????.
    deb_trace_time0x00000800????? ??? ??????? ????? ?????? ?????? ??? ?????? ????? ?? Timesync.cxx.
    deb_trace_user0x00001000????? ??? ??????? ???? API ???????? ???? ??? ???????? ?? DEB_TRACE_API ???? ???? ???? ?????? ?? Userapi.cxx.
    deb_trace_leaks0x00002000
    deb_trace_sock0x00004000????? ??? ??????? ??????? ???????? ?? Winsock.
    deb_trace_spn_cache0x00008000????? ??? ??????? ??????? ???? ????? SPN ????? ??????? ?????? ??? ???? ?????? ???? ???????.
    deb_s4u_error0x00010000?? ??? ?????
    deb_trace_s4u0x00020000
    deb_trace_bnd_cache0x00040000
    deb_trace_loopback0x00080000
    deb_trace_tkt_renewal0x00100000
    deb_trace_u2u0x00200000
    deb_trace_locks0x01000000
    deb_use_log_file0x02000000?? ??? ?????
  • ???????: MaxTokenSize
    ?????: REG_DWORD
    ?????? ??????????: 12000 (????)

    ??? ?????? ?? ???? ?????? ????? Kerberos ????? ??????. ???? ???? Microsoft ????? ??? ?????? ??? ?? 65535.
  • ???????: SpnCacheTimeout
    ?????: REG_DWORD
    ?????? ??????????: 15 ?????

    ??? ?????? ?? ??? ??????? ????? ??????? ?????? ?????? ?????? ??????? (SPN). ?? ????? ????? ??????? ?????? SPN ??? ????? ???? ??????.
  • ???????: S4UCacheTimeout
    ?????: REG_DWORD
    ?????? ??????????: 15 ?????

    ??? ?????? ?? ??? ??????? ????? ??????? ?????? ??????? S4U ????????? ?????? ??? ????? ???? S4U ?? ??????? ????.
  • ???????: S4UTicketLifetime
    ?????: REG_DWORD
    ?????? ??????????: 15 ?????

    ??? ?????? ?? ??? ????? ?????? ??? ????? ???? S4U.
  • ???????: RetryPdc
    ?????: REG_DWORD
    ?????? ??????????: 0 (false)
    ????? ????????: 0 (???) ?? ??? ???? ??? ????? (????)

    ???? ??? ?????? ??? ?? ??? ??? ?????? ?? ???? ???? ?????? ???????? ?????? ??? ????? ???? ?????? (AS_REQ) ??? ???? ?????? ??? ?????? ?????? ???? ????.
  • ???????: RequestOptions
    ?????: REG_DWORD
    ?????? ??????????: ?????? 1510 RFC ??

    ???? ??? ?????? ??? ?? ??? ??? ???? ?????? ?????? ??? ????? ???????? KDC ?? "????? ???? ???" ????? (TGS_REQ).
  • ???????: ClientIpAddress
    ?????: REG_DWORD
    ????????? ??????: 0 (??? ??????? ?? 0 ????? ?????? ????? ????? ?????? "?" ???????? ????? ?????? ??????).
    ????? ????????: 0 (???) ?? ??? ???? ??? ????? (????)

    ???? ??? ?????? ??? ?? ??? ??? ???? ????? ????? IP ????? ?? AS_REQ ???? ????? Caddr ?? ????? ??? ?????? IP ?? ???? ?????.
  • ???????: TgtRenewalTime
    ?????: REG_DWORD
    ?????? ??????????: 600 ?????

    ??? ?????? ?? ????? ???? ????? ????? Kerberos ??? ?????? ????? ??? ????? ??? ??????? (TGT) ??? ?????? ?????? ???????.
  • ???????: AllowTgtSessionKey
    ?????: REG_DWORD
    ?????? ??????????: 0
    ????? ????????: 0 (???) ?? ??? ???? ??? ????? (????)

    ???? ??? ?????? ??? ????? ?????? ????? ????? ?? ?????? ?? ?? ??? ?????? TGT ????????. ?????? ?????????? false ?????? ?????.

??????? ??????? ???? ??? ????? Kdc

??? ????? ??????? ????? ??????? ?? ??? ????? ??? ????? ??????? ?????? ??????:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Kdc
?????? ??? ??? ????? Kdc ????? ??? ????? ??? ????? ???????.
  • ???????: KdcUseClientAddresses
    ?????: REG_DWORD
    ?????? ??????????: 0
    ????? ????????: 0 (???) ?? ??? ???? ??? ????? (?????)

    ???? ??? ?????? ??? ?? ??? ??? ???? ??? ?????? IP ????? ?? ??? ????? ???? ?? (TGS_REP).
  • ???????: KdcDontCheckAddresses
    ?????: REG_DWORD
    ?????? ??????????: 1
    ????? ????????: 0 (???) ?? ??? ???? ??? ????? (?????)

    ???? ??? ?????? ??? ?? ??? ??? ???? ?????? ?? TGS_REQ ?????? Caddr TGT ?????? IP.
  • ???????: NewConnectionTimeout
    ?????: REG_DWORD
    ?????? ??????????: 10 (?????)

    ??? ?????? ?? ????? ???? ???? ???????? ?????? ???????? ???????? ??? ?? ???? ????? ????? ???? ????? TCP ????.
  • ???????: MaxDatagramReplySize
    ?????: REG_DWORD
    ?????? ??????????: 1465 (????, ????)

    ??? ?????? ?? ???? ?????? ???? ?????? UDP ?? TGS_REP ?????? ?????? ???? ?????? (AS_REP). ??? ????? ??? ?????? ??? ?????? ? KDC ????? ????? KRB_ERR_RESPONSE_TOO_BIG ????? ??????? ?????? ??? TCP.

    ?????? ????? MaxDatagramReplySize ?? ???? ?????? ????? ??? ??? UDP Kerberos.

    ????? ?? ????????? ??? ??? ???????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft" (????? ?? ??? ???????? ??? ???? ?? ???? ??????? ??? ?? ??? ??? ?????? ??????????):
    244474????? ??? Kerberos ???????? TCP ????? ?? UDP ?? Windows
  • ???????: KdcExtraLogLevel
    ?????: REG_DWORD
    ?????? ??????????: 2
    ????? ????????:
    • 0x1 (????? ????) ?? 1 (????): SPN ????? ??????? ??? ?????.
    • 0x2 (????? ????) ?? 2 (????): PKINIT ??? ???????. (PKINIT ????? ?????? ?????? ?????? ???????? ??????? (IETF) ?? "??????? ????? ????? ??????? ?????? ?? Kerberos.")
    • 4 (????) ?? 0x4 (????? ????): ????? ???? KDC ?????.
    • 8 (????) ?? 0x8 (????? ????): KDC ????? ??? ????? 25 ?? ??? ?????? ??? ??? S4U2Self ????? ???????? ??? ???? ???? ??? ??? ???????? ?????.
    • 16 (????) ?? 0x10 (????? ????): ????? ????? ??????? ??? ??? ????? (ETYPE) ???????? ?????? ??? ?????.
    ???? ??? ?????? ??? ?? ?? ????????? ???? ???? ????? KDC ?? ????? ??????? ???? ??? ??????? ???????.
  • ???????: KdcDebugLevel
    ?????: REG_DWORD
    ?????? ??????????: 1 ?? ??? ???????, 0 ?? ??? ???? ?????

    ???? ??? ?????? ??? ?? ??? ???? ????? ??????? (1) ?? ????? ?????? (0).

    ??? ?? ????? ?????? 0x10000000 (????? ????) ?? 268435456 (???????) ? ??????? ????? ?? ????? ?? ?? ???? ????? ?? ????? edata KERB_ERRORS ?????? PKERB_EXT_ERROR ????? ??? ?????? KDC.

???????

???? ???????: 837361 - ????? ??? ??????: 05/???? ??????/1429 - ??????: 5.3
????? ???
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
????? ??????: 
kbmt kbwinservnetwork kbsecurityservices kbregistry kbinfo KB837361 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????837361

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com