dial-up connection login used for Kerberos ticket request

  • Thread starter Thread starter Ondrej Sevecek
  • Start date Start date
O

Ondrej Sevecek

hello,

I have a rather complicated setup:

- Vista SP0 (localized unfortunatelly)
- logging on with a domain user (may be from cache when offline)
- CDMA dial-up connection using a login of a form: 5849490303@o2....cz
- giving me 10.166.1.x
- NetBIOS disabled
- VPN connection to a company network using a login of a form: domain\user
- giving me 10.2.x.x
- NetBIOS disabled
- Use default gateway on remote network: ON
- workaround (hotfix requested, not having arrived yet) of the NetBIOS file
sharing problem made according to:
http://support.microsoft.com/kb/933468

Once I dial CDMA and also the VPN, this is a fact:
- ping "dir.domain.local" works correctly
- ping "dir" works correctly
- portqry -n dir.domain.local -e 445 works well as is the case with a short
name
- which means the name translation and TCP connections are working all well
- \\dir.domain.local\sysvol connects ok
- system askes for Kerberos ticket (TGT) and also for the TGS
- tickets are received, authentication done by using them and the list
is displayed.

BUT
- \\dir\sysvol returns "The specified user does not exist."
- because the system tries to obtain Kerberos ticket for the CDMA login
- sying: give me TGT for 584930453@o2....cz
- which certainly cannot succeeed

QUESTION:
how to prevent the kerberos client from trying to obtain a ticket for the
CDMA login and use the logged on user's name and password instead?

thanks.

ondra.
 
Back
Top