J
Jesse Schuchart
PWA is working locally on the server, but when I attempt to login at a
workstation, I am prompted for a user ID and password. I do not get this
when I login locally. We are using the default install of project server,
without SharePoint server, just Windows SharePoint 3.0.
After 3 attempts, I get the following:
You are not authorized to view this page
You do not have permission to view this directory or page using the
credentials that you supplied.
Within the event logs on the workstation, I see the following error:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/server.domain. The target name used was HTTP/server.domain. This
indicates that the target server failed to decrypt the ticket provided by the
client. This can occur when the target server principal name (SPN) is
registered on an account other than the account the target service is using.
Please ensure that the target SPN is registered on, and only registered on,
the account used by the server. This error can also happen when the target
service is using a different password for the target service account than
what the Kerberos Key Distribution Center (KDC) has for the target service
account. Please ensure that the service on the server and the KDC are both
updated to use the current password. If the server name is not fully
qualified, and the target domain (domain) is different from the client domain
(domain), check if there are identically named server accounts in these two
domains, or use the fully-qualified name to identify the server.
The client and server are on the same domain.
workstation, I am prompted for a user ID and password. I do not get this
when I login locally. We are using the default install of project server,
without SharePoint server, just Windows SharePoint 3.0.
After 3 attempts, I get the following:
You are not authorized to view this page
You do not have permission to view this directory or page using the
credentials that you supplied.
Within the event logs on the workstation, I see the following error:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/server.domain. The target name used was HTTP/server.domain. This
indicates that the target server failed to decrypt the ticket provided by the
client. This can occur when the target server principal name (SPN) is
registered on an account other than the account the target service is using.
Please ensure that the target SPN is registered on, and only registered on,
the account used by the server. This error can also happen when the target
service is using a different password for the target service account than
what the Kerberos Key Distribution Center (KDC) has for the target service
account. Please ensure that the service on the server and the KDC are both
updated to use the current password. If the server name is not fully
qualified, and the target domain (domain) is different from the client domain
(domain), check if there are identically named server accounts in these two
domains, or use the fully-qualified name to identify the server.
The client and server are on the same domain.