Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 954409 - Last Review: July 11, 2008 - Revision: 1.0
You receive a Kerberos PAC validation error message when you start multiple processes on multiple Windows Server 2008-based computers
Consider the following scenario:
- You start multiple processes on multiple Windows Server 2008-based computers from domains that do not directly trust one another.
- The processes have to validate the Kerberos Privilege Attribute Certificate (PAC).
In this scenario, the processes do not authenticate one another. Additionally, you receive a Kerberos PAC validation error message.
This issue occurs because Kerberos PAC validation relies on Net Logon generic pass-through authentication. This authentication is supported only for domains that are directly trusted. For more information about trusts, visit the following Microsoft TechNet Web site:
APPLIES TO
- Windows Server 2008 Enterprise
- Windows Server 2008 Datacenter
- Windows Server 2008 Standard
- Windows Web Server 2008
- Windows Server 2008 for Itanium-Based Systems
| kbprb kbexpertiseadvanced kbtshoot KB954409 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate