Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. You receive a Kerberos PAC validation error message when you start multiple processes on multiple Windows Server 2008-based computers

You receive a Kerberos PAC validation error message when you start multiple processes on multiple Windows Server 2008-based computers

View products that this article applies to.

Symptoms

Consider the following scenario:
�You start multiple processes on multiple Windows Server 2008-based computers from domains that do not directly trust one another.
�The processes have to validate the Kerberos Privilege Attribute Certificate (PAC).
In this scenario, the processes do not authenticate one another. Additionally, you receive a Kerberos PAC validation error message.

↑ Back to the top

Cause

This issue occurs because Kerberos PAC validation relies on Net Logon generic pass-through authentication. This authentication is supported only for domains that are directly trusted. For more information about trusts, visit the following Microsoft TechNet Web site:
http://technet2.microsoft.com/windowsserver/en/library/b6284369-73ea-4d68-a3a5-975a0fe6782d1033.mspx?mfr=true

↑ Back to the top

Keywords: KB954409, kbtshoot, kbexpertiseadvanced, kbprb

↑ Back to the top

Article Info
Article ID : 954409
Revision : 1
Created on : 7/11/2008
Published on : 7/11/2008
Exists online : False
Views : 671