|
Posted by bagins on May 7, 2006, 3:57 am
Please log in for more thread options
Kerberos authentication technical reference
http://technet2.microsoft.com/WindowsServer/en/Library/b748fb3f-dbf0-4b01-9b22-be14a8b4ae101033.mspx
Kerberos authentication in W2K3
http://www.microsoft.com/windowsserver2003/technologies/security/kerberos/default.mspx
W2K3 Kerberos extensions
http://technet2.microsoft.com/WindowsServer/en/Library/4c8b5ac7-368b-45b9-91d7-1ae7c5e0da311033.mspx
Google
http://www.google.com/search?q=kerberos+windows+2003+site:microsoft.com
************************
Best regards
Bagins
************************
>I recieved these two event entries. What exactly are they telling me?
>(ie.
> ticket options, ecryption type, pre-authentication type, etc). I haven't
> had
> much luck getting piece by piece explanations anywhere on the internet. I
> have a DC running win 2k3 with xp pro clients. Thanks for your help.
>
> Event Type: Success Audit
> Event Source: Security
> Event Category: Account Logon
> Event ID: 672
> Date: 5/5/2006
> Time: 2:47:11 AM
> User: NT AUTHORITY\SYSTEM
> Computer: <Servername domain controller, win 2k3>
> Description:
> Authentication Ticket Request:
> User Name: <username>
> Supplied Realm Name: <DomainName>.LOCAL
> User ID: <Domain User>
> Service Name: krbtgt
> Service ID: <DomainName>\krbtgt
> Ticket Options: 0x40810010
> Result Code: -
> Ticket Encryption Type: 0x17
> Pre-Authentication Type: 2
> Client Address: <ipaddress>
> Certificate Issuer Name:
> Certificate Serial Number:
> Certificate Thumbprint:
>
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
>
> Event Type: Success Audit
> Event Source: Security
> Event Category: Account Logon
> Event ID: 673
> Date: 5/5/2006
> Time: 2:47:11 AM
> User: NT AUTHORITY\SYSTEM
> Computer: <Servername domain controller, win 2k3>
> Description:
> Service Ticket Request:
> User Domain: <DomainName>.LOCAL
> Service Name: krbtgt
> Service ID: <DomainName>\krbtgt
> Ticket Options: 0x60810010
> Ticket Encryption Type: 0x17
> Client Address: <ipaddress>
> Failure Code: -
> Logon GUID:
> Transited Services: -
>
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
|