Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationKerberos and Authentication/Delegation Problem.Kerberos and Authentication/Delegation Problem.
Previous
 
Next
New Post
11/2/2006 2:56 PM
 

 Hi there.

Sorry for duplicate posts, but I posted to the wrong forum yesterday!

I was wondering if anyone has has a similar issue to one we are having. We are using DNN for an intranet portal. the portal is integrated with our Windows Server 2003 AD network. The users should just browse to the portal and be logged in automatically. For various reasons we are using impersonatrion and delegation throughout the layers. Thus the IIS server impersonates the desktop user and delegates his credentials to the backend database. This means that the database access is made with the desktop user's credentials. Frequently, when first browsing to the portal, users get an error along the lines "Login failed for user ('null'). Not associated with a trusted SQL connection". Whenever this happens, we get a kerberos error logged in the IIS box. We started at DNN V4.0.2 and upgraded to V4.3.5 in the hope that the error would go away - it didnt. We have set up a parallel system of servers and get the same issues there too.

I thought that this was not a DNN issue and so put in a help ticket with Microsoft. All of the guys at MS that I have spoken with completly stumped by this. Now, I am not so sure that it is not a DNN issue after all. I have highlighted a line from the event log that I do not like the look of, but to be quite honest, I am way out of my league at this point. Can anyone help or ask intelligent questions that would get me going down a good path?

Thanks in advance

Bill

 

Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 3
Date:  11/1/2006
Time:  12:15:30 PM
User:  N/A
Computer: TAS01
Description:
A Kerberos Error Message was received:
         on logon session
 Client Time:
 Server Time: 17:15:30.0000 11/1/2006 Z
 Error Code: 0xd KDC_ERR_BADOPTION
 Extended Error: 0xc00000bb KLIN(0)
 Client Realm:
 Client Name:
 Server Realm: ELIZACORP.COM
 Server Name: host/tas01.elizacorp.com
 Target Name: host/tas01.elizacorp.com@ELIZACORP.COM
 Error Text:
 File: 9
 Line: ae0
 Error Data is in record data.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationKerberos and Authentication/Delegation Problem.Kerberos and Authentication/Delegation Problem.


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out