Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

Pre-requisite
Ensure that your window's registry is setup as follows:

Field Name

Description/Action

For Windows XP and Windows 2000, the registry key and value should be:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos
Value Name: allowtgtsessionkey
Value Type: REG_DWORD
Value: 0x01

For Windows 2003 and Windows Vista, the registry key and value should be:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parametes
Value Name: allowtgtsessionkey
Value Type: REG_DWORD
Value: 0x01

Refer the following table for details of the configuration file:

Field Name

Description/Action

KerberosClient

Name of the login module

useTicketCache

Set this to true, if you want the TGT to be obtained from the ticket cache. Set this option to false if you do not want this module to use the ticket cache.

renewTGT

Set this to true, if you want to renew the TGT. If this is set, useTicketCache must also be set to true; else it will show a configuration error.

Debug

Enabling this can sometimes be helpful to know the root cause of an authentication error.

doNotPromp

Setting this to true, will not prompt the user for the password.


  • No labels