GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » Kerio Control Domain users login problem (Kerio Control Domain users login problem)
Kerio Control Domain users login problem [message #115306] Wed, 06 August 2014 15:53 Go to next message
sheriff is currently offline  sheriff
Messages: 12
Registered: September 2011
Location: Azerbaijan
I have DC and ADC. I want to use domain users for authentication. Domain users listed on aaa.local list. But when i try to login "Incorrect username or password" shown on browser. I cannot login domain users on web interface.
NTLM authentication is working.
Please help
Re: Kerio Control Domain users login problem [message #115314 is a reply to message #115306] Thu, 07 August 2014 04:16 Go to previous messageGo to next message
mlee (Kerio)
Messages: 211
Registered: October 2012
Location: Sydney
I assume you have read this knowledge base article?
http://kb.kerio.com/1277

M.


PTSD. BP. OCD. ASPD. BPD. Certified.
Re: Kerio Control Domain users login problem [message #115335 is a reply to message #115314] Thu, 07 August 2014 10:56 Go to previous messageGo to next message
sheriff is currently offline  sheriff
Messages: 12
Registered: September 2011
Location: Azerbaijan
I read this article. Before Additional Domain Control installation authentication is working. When i install Additional Domain Control web interface authentication problem begins.
How can i solve problem?
Re: Kerio Control Domain users login problem [message #115359 is a reply to message #115314] Fri, 08 August 2014 12:35 Go to previous messageGo to next message
sheriff is currently offline  sheriff
Messages: 12
Registered: September 2011
Location: Azerbaijan
May be i install or confige on Active directory?
Re: Kerio Control Domain users login problem [message #115411 is a reply to message #115306] Tue, 12 August 2014 13:37 Go to previous messageGo to next message
sheriff is currently offline  sheriff
Messages: 12
Registered: September 2011
Location: Azerbaijan
who can anybody help me?
Re: Kerio Control Domain users login problem [message #115449 is a reply to message #115411] Thu, 14 August 2014 09:05 Go to previous messageGo to next message
mlee (Kerio)
Messages: 211
Registered: October 2012
Location: Sydney
What OS is Kerio Connect installed on?

Please enable "User Authentication" in Debug log, login through webmail again and post the error.

M.


PTSD. BP. OCD. ASPD. BPD. Certified.
Re: Kerio Control Domain users login problem [message #115455 is a reply to message #115449] Thu, 14 August 2014 12:44 Go to previous messageGo to next message
sheriff is currently offline  sheriff
Messages: 12
Registered: September 2011
Location: Azerbaijan
Kerio control version is 8.3.1 build 2108.

Debug LOG

{auth} Krb5: get_init_creds_password(krbtgt/BOTL.LOCAL@BOTL.LOCAL, serxan<_at_>BOTL.LOCAL): Clock skew too great, error code 0x96c73a25 (-1765328347)
Re: Kerio Control Domain users login problem [message #115463 is a reply to message #115455] Thu, 14 August 2014 16:54 Go to previous messageGo to next message
markt is currently offline  markt
Messages: 27
Registered: July 2007
Location: Leeds, UK
sheriff wrote on Thu, 14 August 2014 11:44
Kerio control version is 8.3.1 build 2108.

Debug LOG

{auth} Krb5: get_init_creds_password(krbtgt/BOTL.LOCAL<_at_>BOTL.LOCAL, serxan<_at_>BOTL.LOCAL): Clock skew too great, error code 0x96c73a25 (-1765328347)


AD is extremely time sensitive, it looks like there is a disparity between your DC and the Kerio installation - do you have any time sync in place (i.e. out to an external NTP server)? If you want to lock down the DC, have Kerio sync to a NTP server and have the DC time sync to Kerio. Check time zones etc are set the same.
Re: Kerio Control Domain users login problem [message #115479 is a reply to message #115463] Fri, 15 August 2014 08:23 Go to previous message
sheriff is currently offline  sheriff
Messages: 12
Registered: September 2011
Location: Azerbaijan
I changed time zone to another zone problem solved.
Thanks for all.

[Updated on: Fri, 15 August 2014 08:23]

Report message to a moderator

Previous Topic: DNS setting changes ignored
Next Topic: Traffic Chart - KB/s to kb/s
Goto Forum:
  


Current Time: Mon Sep 25 04:58:44 CEST 2023

Total time taken to generate the page: 0.06011 seconds