Connecting OS 9 Clients with kerberos

Hi All-
I am trying to get a couple of OS 9 boxes to connect to AFP on my 10.4.7 Server via Kerberos. I've got the kerberos app installed on the clients and i am able to obtain tickets, but niether the chooser nor the network browser uses this ticket to authenticate. I've upgraded the appleshare extension on the clients to 3.9.4... I read somewhere that it helps when connecting to an OS X server, but kerberos is still a no-go. My OS X clients work perfectly. Has anyone successfully used Kerberos on OS 9? Any help at all will be greatly appreciated.
Here is some version information for my setup-
The servers are: 2.3 GHZ DP Xserve
OS X AFP Server 10.4.7
OS X OD Master Server 10.4.7
OS 9 Client 9.2.2
appleshare extension 3.9.4
Kerberos for OS 9 4.0.3
Thanks.
Rob Green
[email protected]
2.3 DP G5 Xserve Mac OS X (10.4.7)

Unfortunately, what you're trying to do is not possible.
It sounds like you have Kerberos set up correctly, but that's not the problem. The problem is that the Mac OS 9 AFP client (AppleShare client 3.8.x) does not use Kerberos as a native authentication module.
The only native modules are clear text, scrambled, and DHX (Diffie-Hellman Exchange). Of course, DHX would be your only supported module when connecting to a Mac OS X AFP 3.x server.
--Gerrit

Similar Messages

Remote PowerShell Connection to Lync Server With Kerberos authentication Fails

Hi everyone ,
Remote PowerShell to Lync Server With Kerberos authentication Fails .. Is there any reason for not being able to connect when authentication specified as Kerberos . But exactly same code works when Authentication is specified as "Negotiate"
E.g :
Error -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Kerberos
[serverName.lync.com] Connecting to remote server failed with the following error message : The WinRM client cannot process the request. The authentication mechanism requested by the client is not supported by the server or unencrypted traffic is disabled in
the service configuration. Verify the unencrypted traffic setting in the service configuration or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify the computer name as the remote destination. Also verify
that the client computer and the destination computer are joined to a domain.To use Basic, specify the computer name as the remote destination, specify Basic authentication and provide user name and password. Possible authentication mechanisms reported by
server:   Digest Negotiate For more information, see the about_Remote_Troubleshooting Help topic.
    + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
   eption
    + FullyQualifiedErrorId : PSSessionOpenFailed
Works -
$session=New-PSSession -ConfigurationName Microsoft.Powershell -ConnectionUri https://serverName.lync.com/ocspowershell/ -Credential $cred -Authentication Negotiate

Hi,
Please double check if Windows Update is the latest version, if not, please update and then test again.
Please also ensure that the workstation you are using has network access to the Certificate Authority that signed the certificate.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Unable to connect the crm client with the IPC server

Hi,
I am unable to connect with one CRM client with the IPC server.
my Dispatcher and all the IPC servers are working all.
Plz helpme out.
With thanks and Regards,
Yusuf.

Hi Muhammed,
Check in the file dispatcher.properties if the RFC names are correctly maintained.
Regards,
Patricia
PS Your post was in the wrong forum. I moved it to the correct one where the chance of an answer is much higher.
Hope you understand and good luck.
Regards,
Patricia
SDN Moderator

Syclo : Error in connecting Work Manager Client with Agentry Server

Hi,
Can somebody please shed some light on work manager client-server connections? I have downloaded the "SAP_WORK_MANAGER_BY_SYCLO_5.2" package from market place and set up the Work Manager server. It can successfully connect to the SAP back-end. Environment variables are correctly set too. However, I'm failing to connect to the Work Manager server from the Work Manager clients. I have tried from the Win32 & Android clients both.
For Win32 client, the error I'm getting is:
For Android, I can't even see the server instance, although it's running (it shows up while attempting to connect from Win32). Error:
When I attempt to connect from Work Manager client to the server, it asks for username/password and for Android client it asks for Agentry user id and password. Aren't these username/password of the server where my Work Manager (Agentry) server is installed?
Also, the "Agentry Development Server" which has been set to run as a service runs with Administrative privileges.
I followed this: http://wiki.scn.sap.com/wiki/display/SAPMOB/Agentry+error+Client+Receiving+RFC+ERROR+LOGON+FAILURE+incomplete+logon+Data+when+connecting+to+server
It didn't help. Please let me know where I'm going wrong?
Tags edited by: Michael Appleby

Hi Michael,
I can login to SAP backend using the credentials mentioned in JavaBE.ini file.
Please take a look at the JavaBE.ini:
[HOST]
server=<SAP server host name>
; mobile application name configured in sap like SMART_WORK_MANAGER_51, SMART_CUSTOMER_SERVICE_10, SMART_ISU_WORK_MANAGER_10...etc
APPNAME=SMART_WORK_MANAGER_52
[CONFIG]
; Used to get the SAP Configutaions from SAP if source=SAP or from JavaBE ini file
; SAP Configurations are [ENABLE_TABLE], [TABLE_CHECK], [TABLE_REFRESH], [BAPI_WRAPPER],
; [SAPOBJECT], [CT_SAPOBJECT], [CT_BAPI_WRAPPER], [CT_RETURN_TABLE], [CT_DELETE_TABLE].....etc
source=SAP
[TEST_LOGON]
UID=
UPASSWORD=
UGUID=
SERVERSERIALNUM=
; Service login user is used to get the SAP Configutaions from SAP if source=SAP
; Set ENABLED=true if source=SAP or ENABLED=false if source=INI
; If ENABLED=true, set the UID, UPASSWORD and SERVERSERIALNUM
; SERVERSERIALNUM is the Agentry server serial number
[SERVICE_LOGON]
ENABLED=true
UID=<SAP backend username>
UPASSWORD=<SAP backend password>
UPASSWORDENCODED=false
SERVERSERIALNUM=AVKNN@NILKGGBTLD
[PUSH_LOGON]
ENABLED=false
UID=
UPASSWORD=
UPASSWORDENCODED=false
SHAREDCONNECTION=10
[CLIENT_NUM]
CLIENT=720
;CLIENT=010
[SYSTEM_NUM]
;SYSNUM=33
SYSNUM=00
[LANGUAGE]
LANG=EN
[LOGGING]
;1=Fatal, 2=Error, 3=Warning, 4=Info, 5=debug, 6=trace
Level=4
[LOGON_METHOD]
; USER_AUTH if standard UID/Password authentication is used
; USER_AUTH_GLOBAL if pooled connections using single UID/Password is used
; USER_AUTH_GROUP if UID/Password authentication with SAP Message Server
; (load balancing) is used
LOGON_METHOD=USER_AUTH
[GLOBAL_LOGON]
; referenced when LOGON_METHOD=USER_AUTH_GLOBAL
; uses a pool of connections to the SAP backend all utilizing a single
; UID/password
UID=
UPASSWORD=
SHAREDCONNECTION=100
[GROUP_LOGON]
; referenced when LOGON_METHOD=USER_AUTH_GROUP
; individual user authentication using an SAP Message Server which distributes
; client connections among a "group" of SAP application servers based on load
; balancing criteria
; host name or IP address of SAP Message Server
MESSAGE_SERVER=
GROUP_NAME=
SYSTEM_ID=
CLIENT=
[REQUIRED_BAPI_WRAPPER]
com.syclo.sap.bapi.LoginCheckBAPI=/SYCLO/CORE_SUSR_LOGIN_CHECK
com.syclo.sap.bapi.RemoteUserCreateBAPI=/SYCLO/CORE_MDW_SESSION1_CRT
com.syclo.sap.bapi.RemoteParameterGetBAPI=/SYCLO/CORE_MDW_PARAMETER_GET
com.syclo.sap.bapi.SystemInfoBAPI=/SYCLO/CORE_SYSTINFO_GET
com.syclo.sap.bapi.ChangePasswordBAPI=/SYCLO/CORE_SUSR_CHANGE_PASSWD
com.syclo.sap.bapi.CTConfirmationBAPI=/SYCLO/CORE_OUTB_MSG_STAT_UPD
com.syclo.sap.bapi.DTBAPI=/SYCLO/CORE_DT_GET
com.syclo.sap.bapi.GetEmployeeDataBAPI=/SYCLO/HR_EMPLOYEE_DATA_GET
com.syclo.sap.bapi.GetUserDetailBAPI=/SYCLO/CORE_USER_GET_DETAIL
com.syclo.sap.bapi.GetUserProfileDataBAPI=/SYCLO/CORE_USER_PROFILE_GET
com.syclo.sap.bapi.PushStatusUpdateBAPI=/SYCLO/CORE_PUSH_STAT_UPD
com.syclo.sap.bapi.RemoteObjectCreateBAPI=/SYCLO/CORE_MDW_USR_OBJ_CRT
com.syclo.sap.bapi.RemoteObjectDeleteBAPI=/SYCLO/CORE_MDW_USR_OBJ_DEL
com.syclo.sap.bapi.RemoteObjectGetBAPI=/SYCLO/CORE_MDW_SESSION_GET
com.syclo.sap.bapi.RemoteObjectUpdateBAPI=/SYCLO/CORE_MDW_SESSION_UPD
com.syclo.sap.bapi.RemoteReferenceCreateBAPI=/SYCLO/CORE_MDW_USR_KEYMAP_CRT
com.syclo.sap.bapi.RemoteReferenceDeleteBAPI=/SYCLO/CORE_MDW_USR_KEYMAP_DEL
com.syclo.sap.bapi.RemoteReferenceGetBAPI=/SYCLO/CORE_MDW_SESSION_GET
com.syclo.sap.bapi.RemoteReferenceUpdateBAPI=/SYCLO/CORE_MDW_SESSION_UPD
com.syclo.sap.bapi.RemoteSessionDeleteBAPI=/SYCLO/CORE_MDW_SESSION1_DEL
com.syclo.sap.bapi.RemoteUserDeleteBAPI=/SYCLO/CORE_MDW_SESSION1_DEL
com.syclo.sap.bapi.RemoteUserUpdateBAPI=/SYCLO/CORE_MDW_SESSION_UPD
com.syclo.sap.bapi.TransactionCommitBAPI=WFD_TRANSACTION_COMMIT
com.syclo.sap.bapi.SignatureCaptureBAPI=/SYCLO/CS_DOBDSDOCUMENT_CRT
I haven't yet installed ATE and tested out any application. I just want my connections to be perfect, first.
I have a question. Are the credentials used to connect Work Manager client to the server, same as the SAP backend credentials or are they the credentials of the host on which the Work Manager server is installed?
I have tried logging in using the SAP credentials also. But that results in error too.
These credentials are valid for SAP backend and successfully logs onto it and also responds correctly to connectTest.bat. However, I think this error is logical because these are the credentials for SAP backend and not the server where Work Manager server is hosted.

VVX handset initiated call will not connect to Lync client with simultaneous ring enabled

Has anyone encountered a similar issue? And any advice on how to fix it please? (note - a case has been logged with Polycom, but weeks are passing by and they have not provided any useful response so far; hence reaching out in
the community for help) .... thanks in anticipation.
Here's the scenario:
A Lync 2010 user in the office (I'll call her Lisa) has setup her Sim Ring to an external number (her mobile number).
Another Lync 2010 user in the office (Mike) calls Lisa's extension from his VVX410.
Lisa answers the incoming call using her Lync client with a USB headset.
The call appears to connect according to Mike and his VVX screen starts the call timer.
Lisa's Lync client just says "Connecting Call ..." but never actually connects.
The line is silent for both Mike and Lisa. There is no audio in either direction.
Further testing reveals the following:
The same problem occurs if Lisa uses a VVX handset to answer and also happens if she uses a CX600 handset to answer. Hence the problem seems to relate specifically to the fact that Lisa has setup Sim Ring to an external number; rather than relating
to the answering device type.
If Lisa changes her Sim Ring so that it calls another internal extension, then the problem does not exist, i.e. calls connect fine. Hence it seems to be specific to sim ring to an external number.
The environment is Lync Server 2010 CU6, Lync client 2010 on Win 7 (although the same problem exists when tested with a Lync 2013 on Win 8.1 client); and with AudioCodes Mediant 2000 and 1000 gateways.

Please specify another external number for Simultaneously Ring.
You phone may not have permission to dial an external phone number.
Please check if you can call the external phone number directly.
Lisa Zheng
TechNet Community Support

Failed connection Windows 7 clients with WLC2504+NPS 2012

Hello
I have some interesting experience. I configured my wireless controller 2504 with a Windows 2012 Server as radius server for authenticating the active directory's users. So, I have one Windows 2012 R2 server configured as a Domain Controller and installed and configure NPS , and  CA server configured in another Windows 2008 R2 Server. Also I have one clients PC's with Windows 8.1 and several Windows 7 connected to My Domain, also iPad and Android devices out of Domain of course.
I used this sources when configuring it.
http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117684-configure-WLAN-00.pdf
http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115988-nps-wlc-config-000.pdf
The problem is, that all Windows 7 clients do not connect to my SSID with Auth 802.1.x + PEAP , but other clients connect successfully and automatically without problems.
I tried a lot of action, for example , from this source http://www.networkworld.com/article/2160056/security/tips-for-troubleshooting-802-1x-connections.html
But I have no success to resolve it. I ensured that W7 PC using the correct CertAutority. But,  anyway I reinstalled this Cert.
I have no idea anymore. Please help.
Some logs in attachments.

Thank you for your reply, Sebastian
Yes, I checked my certificates, and I tried to install manually a certificate of NPS server. Also tried to uncheck the Validate server certificate option. The result was the same - no connect, only logs in controller slightly was changed.
Also in advanced section I chosen and User Authentication and User/Computer Authentication. The same result.
I want to notice, that I configured one else radius server - the Cisco ACS 4.2. This server is not connected with Active Directory. And another ssid is fastened with this radius by EAP. The Windows 7 client connect to this ssid with the following options:
Unchecked the Validate server certificate
Unchecked Use Windows logon
In Advanced Section, check and choose User Authentication, and save the local ACS username and password.
Now, I want to install a radius on Windows 2003 Server, this server connected to Domain. Let's see how this works out.

How to connect Lync 2013 client with OCS 2007 R2 Edge server

Hi,
We have OCS 2007 R2 Edge server for external & OCS 2007 R2 FE Server for internal access in our environment.
We able to access internally Lync2013 clients with OCS 2007R2 server, however from external we cannot access Lync2013 client with OCS2007 R2 server.
Is there any patch or registry key trick to access OCS from lync2013 client externally? We cannot immediately migrate to Lync2013 server from OCS.
Any help
MD

Hi,
I suggest you still use OCS 2007 R2 client to login OCS 2007 R2 Server untill finishing migration to Lync Server 2013, as using Lync client with OCS 2007 R2 Server will offer a pretty limited experience.
Here is a great blog about Lync 2010 Client unsupported with OCS, it is for Lync 2010 client but similar for Lync 2013 client:
http://blog.schertz.name/2010/09/lync-client-unsupported-ocs/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Connecting a Java Client with a VB Server (problem in recieving messages)

Hi all, i have a VB based Server through which i am trying to connect a VB Server through Sockets
The Connection is Successfull but the problem i am unable to recieve all the messages from VB Server,
but all the messages on the Server Side is coming properly, i want to know do we have a secure connection between Vb and Java

Your answer is here.

How to setup Oracle OCI Driver with Kerberos Authentication in Eclipse

Hello I am trying to setup a connection to Oracle Server with kerberos authentication.
I am able to connect using SQL Developer but it seems impossible to do the same through the eclipse plugin any pointers?

Currently there is no support for Kerberos authentication on OEPE DB support. I'll open an enhancement request.

How configure Windows 8.1 Clients with IE11 for SSO with Kerberos SPNEGO

We are using BI Publisher OBIEE 11.1.1.7 with SSO Kerberos SPNEGO.
The Weblogic Server Version is WLS_PRODUCT_VERSION=10.3.5.0
The SSO is working very well with Clients that are Windows XP or Windows 2003 R2. We had testet wit IE7,IE8 Firefox.
Now as we become Windows 8.1 Clients with IE11 the Kerberos SPNEGO SSO is not working.
Please give us advice or a HOW TO Document about the configuration on Windows 8.1 Cllients with IE11 Browser.
I find many Dokuments related to older Windows Versions for example
http://www.oracle.com/technetwork/articles/idm/weblogic-sso-kerberos-1619890.html
but nothing for Windows 8.1 Clients
Thanks in advance.

The location for tabs in IE11 browser might be different but the steps are the same :
Configure Local Intranet Domains
   1. In Internet Explorer, select Tools > Internet Options.
   2. Select the Security tab.
   3. Select Local intranet and click Sites.
   4. In the Local intranet popup, ensure that the Include all sites that bypass the proxy server and Include all local (intranet) sites not listed in other zones options are checked.
   5. Click Advanced.
   6. In the Local intranet (Advanced) dialog box, add all relative domain names that will be used for Oracle WebLogic Server instances participating in the SSO configuration (for example, myhost.example.com) and click OK.
Configure Intranet Authentication
   1. Select Tools > Internet Options.
   2. Select the Security tab.
   3. Select Local intranet and click Custom Level... .
   4. In the Security Settings dialog box, scroll to the User Authentication section.
   5. Select Automatic logon only in Intranet zone. This option prevents users from having to re-enter logon credentials, which is a key piece to this solution.
   6. Click OK.
Verify Proxy Settings
If you have a proxy server enabled:
   1. Select Tools > Internet Options.
   2. Select the Connections tab and click LAN Settings.
   3. Verify that the proxy server address and port number are correct.
   4. Click Advanced.
   5. In the Proxy Settings dialog box, ensure that all desired domain names are entered in the Exceptions field.
   6. Click OK to close the Proxy Settings dialog box.
What is the error reported by the browser / wls logs ?
-- Puneeth

How to share and Access DB (.accdb) with global tables that link to SQL Server tables without having to define ODBC connections on each client PC?

I have an Access DB with quite a few Linked Tables that point to a SQL Server backend db. Currently I am using an ODBC connection defined on my pc, but I want other users to be able to download the .accdb file from a share and run. Will I have
to define this odbc connection on each client's pc? Is there a better way to do this without having to have each client manually set this up on their PC?

I have an Access DB with quite a few Linked Tables that point to a SQL Server backend db. Currently I am using an ODBC connection defined on my pc, but I want other users to be able to download the .accdb file from a share and run. Will
I have to define this odbc connection on each client's pc? Is there a better way to do this without having to have each client manually set this up on their PC?
Hi Jason,
I think you can automate that process. In each application I use a one-record-table in the FE with a field Connected. Connected is default False.
Starting a database in the development mode ignores this flag. Starting a database in production mode starts, if Not Connected, a procedure to RefreshLink the tables to the BE, and makes Connected = TRUE, so a next startup does not
result in a new RefreshLink.
Instead of a Boolean you could also use a string containing the path, or whatever you want.
Imb.

Sidebar not connected with Kerberos after upgrade 10.5.2

before upgrade 10.5.2 with sidebar finder i could connected at xserve with kerberos AFP, after upgrade not possible connected sidebar with kerberos only use connected the server in the menu bar finder.
where it is problem
TANKS

You are not alone, I have seen the same issue.
If however I click on the "all .." option in the sidebar, and then on the server name from the subsequent list it works for me.
Weird
Dave

Easy print not working on a 64 bit Windows 8.1 client with Remote Desktop connection version 8.1

Easy print is not working on a 64 bit Windows 8.1 client with Remote Desktop connection version 8.1 . Printers dont get redirected when you connect to the terminal server. The server we are connecting to has Windows 2008 server. On 32 bit Windows
7 and windows XP clients Easy print is working fine and printers get redirected in terminal server.

I am having the exact same problem. Windows 7 works fine, but 8.1 will not redirect printers. Others said to check local policy terminal services settings and my setting are all set as they should.
I think Windows 8.1 is not telling the terminal server what printers it has.

Microsoft Project Prof. 2010 Client with ProjectServer Connection

Hello everybody,
I have problems with my project client instance (Microsoft.Office.Interop.MSProject.Application).
It does not have a connection to my project server.
In the project client itself, i have a default connection to my Project Server. The instance in my program is not using the this default connection.
I instantiate with following code:
var projApp = new Microsoft.Office.Interop.MSProject.Application();
Could somebody help me, how to get a Project Server Connection.
Thanks in advance.
Best regards.
Marc

In case someone has the same question, the solution can be found here: http://social.msdn.microsoft.com/Forums/en-US/a4a3a533-32c4-465b-8153-d71c8eaea7e5/checkout-and-update-a-project-using-managed-code?forum=project2010custprog
The main idea is following: we start MS Project using System.Diagnostics, pass server address as command line parameter to it, and then Interop assembly uses it for Project Server access.
string paramList = " /s " + serverURL;
string winProj = "C:\\Program Files\\Microsoft Office\\Office15\\WINPROJ.EXE";
var startInfo = new ProcessStartInfo(winProj, paramList);
startInfo.WindowStyle = ProcessWindowStyle.Hidden;
startInfo.UseShellExecute = false;
Process.Start(startInfo);app = new ApplicationClass();
app.Visible = false;
app.Alerts((object) false);
app.DisplayAlerts = false;
bool connectedToProjectServer = (app.ActiveProject.ServerURL == serverURL);

10.6.1 clients with 10.5.8 server -- slow connections/lost delegate

Because of timing, I've yet to upgrade my 10.5.8 server to 10.6.1 server.
However, we've updated a number of clients here to 10.6.1
For many clients, they are finding that iCal is occasionally dumping their delegates.
They can readd them, but after a couple of more days, the delegates will get dumped again. It seems like if I add specific calendars to my list of delegates it's more obvious (so I don't necessarily know if the problem is with clients with really large calendars...)
I've filed bugs on this with Apple, but I'm wondering if anybody else has seen this and come up with a solution yet.
(I have plans to update my server in the next few weeks -- if somebody has seen this problem and has resolved it after they updated their server, let me know that as maybe I can accelerate my timetable for this upgrade....)
Thanks!

I just purchased a new macbook pro 13" w/Snow Leopard pre-installed and I am experiencing the exact same issue. I purchased a regular macbook for my wife (at the same time, about a week ago), and I was able to set up her e-mail account without any problems (same e-mail hosting provider as mine).
My e-mail account/settings work fine on my iPhone, as well as another Windows computer (yes, I have tried deleting com.apple.mail.plist and starting over).
***? I paid a premium for the macbook pro, assumably for better construction, performance, and ease of use. I did not expect to pay to be a beta tester.

Connecting OS 9 Clients with kerberos

Similar Messages

Maybe you are looking for