blaadje
asked on
The Local Security Authority cannot be contacted
hello,
If a domain user logs into our intranet it gets the message: The Local Security Authority cannot be contacted. This states that he can log in but something is wrong. Domain administrators do not get this message. The domain users are local admins on the webserver.
I have run the diagnosticstool:
SPNs for CN=AFASDB01,CN=Computers,D C=APOLLO,D C=LOCAL:
krbtgt/afasdb01
krbtgt/afasdb01.apollo.loc al
http/afasdb01.apollo.local
http/afasdb01
host/afasdb01.apollo.local
host/afasdb01
www/afasdb01.apollo.local
www/afasdb01
ServiceName = krbtgt APOLLO.LOCAL
TargetName = krbtgt APOLLO
ClientName = Administrator
DomainName = APOLLO.LOCAL
TargetDomainName = APOLLO.LOCAL
AltTargetDomainName = APOLLO.LOCAL
Diagnostics complete
So this is al oke... The user is able to log in locally!
What am i missing?
If a domain user logs into our intranet it gets the message: The Local Security Authority cannot be contacted. This states that he can log in but something is wrong. Domain administrators do not get this message. The domain users are local admins on the webserver.
I have run the diagnosticstool:
SPNs for CN=AFASDB01,CN=Computers,D
krbtgt/afasdb01
krbtgt/afasdb01.apollo.loc
http/afasdb01.apollo.local
http/afasdb01
host/afasdb01.apollo.local
host/afasdb01
www/afasdb01.apollo.local
www/afasdb01
ServiceName = krbtgt APOLLO.LOCAL
TargetName = krbtgt APOLLO
ClientName = Administrator
DomainName = APOLLO.LOCAL
TargetDomainName = APOLLO.LOCAL
AltTargetDomainName = APOLLO.LOCAL
Diagnostics complete
So this is al oke... The user is able to log in locally!
What am i missing?
Also - what are your IIS authentication settings?
ASKER
integrated windows authentication
ASKER
i do not use ISA what is that?
ASKER
anyone??
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Hi Blaadje
Did you ever find a way to get this to work with out allowing logon to all computers, I am in the same situation.
Thanks
Bob
Did you ever find a way to get this to work with out allowing logon to all computers, I am in the same situation.
Thanks
Bob
ASKER
nope this is the only solution i have found. its crap i know but it works
That's a shame, seems a bit nuts you have to open up like that to allow access to a website but as you say at least it works.
Thanks for getting back to me so fast!
Thanks for getting back to me so fast!
http://support.microsoft.com/kb/813550