kerberos error when joining Windows 2000 domain

  • Thread starter Thread starter Alan
  • Start date Start date
A

Alan

when attempting to join an XP client to a windows 2000
domain, i receive the folowing error on the XP machine. i
have never seen it before and can not find any information
about it in the knowledge base either. please shed some
light on this issue if possible.
thanks

Source: Kerberos
Event ID: 6

Description:
The kerberos SSPI package generated an output token of
size 4342 bytes, which was too large to fit in the 4338
buffer bufffer provided by process id 0. If the condition
persists, please contact your system administrator.
 
This can happen if the Domain User belongs to multiple nested groups which
makes Kerberos token increase in size.

Set MaxTokenSize per the below articles;

327825.KB.EN-US New Resolution for Problems That Occur When Users Belong to
Many Groups
http://support.microsoft.com/default.aspx?scid=kb;en-us;327825

269643.KB.EN-US Internet Explorer Kerberos Authentication Does Not Work
Because of an Insufficient Buffer Connecting to IIS
http://support.microsoft.com/default.aspx?scid=kb;en-us;269643

Hope this helps!

--
Darren Hook
(e-mail address removed)
Microsoft PSS

Please do not send email directly to this alias. This alias is for
newsgroup purposes only.

This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top