FIX: Error message when you try to log on to a domain by using Kerberos authentication on a Windows CE 6.0-based device: "KDC_ERR_S_PRINCIPAL_UNKNOWN: Server not found in Kerberos database"

Article translations Article translations
Article ID: 955251 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

In Microsoft Windows Embedded CE 6.0, you use the Kerberos authentication service on a fresh device or on a device on which all the certificates have been deleted. When you try to log on by entering a user name, a password, and a domain name, the Kerberos authentication may fail. You also see the following error message during the network trace:
KDC_ERR_S_PRINCIPAL_UNKNOWN: Server not found in Kerberos database.

CAUSE

This problem occurs because the domain name was not converted to the fully qualified domain name (FQDN) when the string filled in the form of the domain name. The Lightweight Directory Access Protocol (LDAP) in Windows CE passes the FQDN or the NetBIOS Service Principal Name (SPN) to the Kerberos Security Support Provider Interface (SSPI).

RESOLUTION

Software update information

A supported software update is now available from Microsoft as Windows CE 6.0 Platform Builder Monthly Update (August 2008). You can confirm this by scrolling to the "File information" section of this article. The package file name contains the product version, date, Knowledge Base article number, and processor type. The package file name format is:
Product version-yymmdd-kbnnnnnn-processor type
For example: Wincepb50-060503-kb917590-armv4i.msi is the ARMV4i Windows CE 5.0 Platform Builder fix that is documented in KB article 917590 and that is contained in the May 2006 monthly update. To resolve this problem immediately, click the following article number for information about obtaining Windows CE Platform Builder and core operating system software updates:
837392 How to locate core operating system fixes for Microsoft Windows CE Platform Builder products

Prerequisites

This update is supported only if all previously issued updates for this product have also been installed.

Restart requirement

After you apply this software update, you must perform a clean build of the whole platform. To do this, use one of the following methods:
  • On the Build menu, click Clean, and then click Build Platform.
  • On the Build menu, click Rebuild Platform.
You do not have to restart the computer after you apply this software update.

Update replacement information

This update does not replace any other updates.

File information

The English version of this package has the file attributes (or later file attributes) that are listed in the following table.
Collapse this tableExpand this table
File nameFile sizeDateTime
Wincepb60-080805-kb955251- armv4i.msi1,680,38406-Aug-200800:35
Wincepb60-080805-kb955251- mipsii.msi1,600,00006-Aug-200800:35
Wincepb60-080805-kb955251- mipsii_fp.msi1,600,51206-Aug-200800:35
Wincepb60-080805-kb955251- mipsiv.msi1,627,13606-Aug-200800:35
Wincepb60-080805-kb955251- mipsiv_fp.msi1,628,16006-Aug-200800:35
Wincepb60-080805-kb955251- sh4.msi1,554,43206-Aug-200800:35
Wincepb60-080805-kb955251- x86.msi1,489,40806-Aug-200800:35
The English version of this software update package has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Collapse this tableExpand this table
File nameFile sizeDateTimePath
Winceos.bat143,93031-Jul- 200823:04\public\cebase\oak\misc\
Wldap32.lib2,399,01231-Jul- 200823:24\public\common\oak\lib\armv4i\debug
Wldap32.lib1,417,36231-Jul- 200823:24\public\common\oak\lib\armv4i\retail
Wldap32.lib2,234,52631-Jul- 200823:26\public\common\oak\lib\mipsii\debug
Wldap32.lib1,381,37431-Jul- 200823:25\public\common\oak\lib\mipsii\retail
Wldap32.lib2,234,91831-Jul- 200823:27\public\common\oak\lib\mipsii_fp\debug
Wldap32.lib1,381,79031-Jul- 200823:26\public\common\oak\lib\mipsii_fp\retail
Wldap32.lib2,267,72431-Jul- 200823:28\public\common\oak\lib\mipsiv\debug
Wldap32.lib1,408,62031-Jul- 200823:28\public\common\oak\lib\mipsiv\retail
Wldap32.lib2,268,11631-Jul- 200823:30\public\common\oak\lib\mipsiv_fp\debug
Wldap32.lib1,409,03631-Jul- 200823:29\public\common\oak\lib\mipsiv_fp\retail
Wldap32.lib1,989,72031-Jul- 200823:31\public\common\oak\lib\sh4\debug
Wldap32.lib1,281,87831-Jul- 200823:30\public\common\oak\lib\sh4\retail
Wldap32.lib2,007,96631-Jul- 200823:23\public\common\oak\lib\x86\debug
Wldap32.lib1,302,81231-Jul- 200823:22\public\common\oak\lib\x86\retail

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

REFERENCES

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Properties

Article ID: 955251 - Last Review: September 25, 2008 - Revision: 1.0
APPLIES TO
  • Windows Embedded CE 6.0
Keywords: 
kbexpertiseadvanced kbqfe kbfix KB955251

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com