Kerberos and domain placeholders

[Scott Boettcher]

We are in the process of outsourcing our email services to Microsoft.
In the test environment, we are seeing a problem with Entourage not being
able to use the Kerberos tickets with Office 2008.
The message "this Exchange Server does not support Kerberos"
The Macs are bound to Active Directory, and tickets assigned on login.
Placeholder accounts are a duplicate of our global accounts. MS Online
creates a placeholder account for every Global account created and than
disables it.
Because of this, we get false errors that the domain password is about to
expire, and we can not use the Kerberos tickets to access email.
If we hard-code the account info, it works, but we still get the ³your
password will expire in 0 days² error due to the placeholder being used.

Any ideas on how to combat this?

Best,
Scott

 

[William Smith [MVP]]

We are in the process of outsourcing our email services to Microsoft.
In the test environment, we are seeing a problem with Entourage not
being able to use the Kerberos tickets with Office 2008.
The message "this Exchange Server does not support Kerberos"
The Macs are bound to Active Directory, and tickets assigned on login.
Placeholder accounts are a duplicate of our global accounts. MS Online
creates a placeholder account for every Global account created and than
disables it.
Because of this, we get false errors that the domain password is about
to expire, and we can not use the Kerberos tickets to access email.
If we hard-code the account info, it works, but we still get the “your
password will expire in 0 days” error due to the placeholder being used.

Hi Scott!

Are you trying to get Entourage to use Kerberos with severs outside your
network? Are those servers part of your domain? I'm unfamiliar with
Microsoft's services and how they can interact with a company's
infrastructure, so if you can explain the setup that would be helpful.

I'm also unfamiliar with what you're calling placeholder accounts and
global accounts. Are these Exchange terms? How are these suppose to work?

--

bill

Entourage Help Page <http://entourage.mvps.org/>
Entourage Help Blog <http://blog.entourage.mvps.org/>
YouTalk <http://nine.pairlist.net/mailman/listinfo/youtalk>
Twitter: follow <http://twitter.com/meck>