Account Information Not Recognized... (FWM 00006)

[Former Member]

Account Information Not Recognized: Active Directory Authentication failed to log you on....... (FWM 00006)

Enter your user information and click Log On.

(If you are unsure of your account information, contact your system administrator.)

Created an AD Administration Name in AD server:  boadmin@mydomaim.on.ca ;Default AD Domain:  mydomaim.on.ca

Authentication Options: Use Kerberos authentication;Service Principal Name: boadmin

Did setspn test in AD server: setspn -l boadmin command

cn=boadmin,OU=service Account,OU=system management,OU=user OUs, DC=mydomain,DC=ON;DC=CA:BOBJCentralms/myservername.on.ca

bscLogin.conf and brb5.ini files are created in C:\WINNT

Within CCM Tool:

IBM HTTP server 6.1 version 2.047.0 running

SIA  2..1.0 running

World Wide Web Publishing Service 5.2.3790.3959 STOPPED

Please help..

[former_member189884]

default domain should be in all caps also check from the manage servers option in the ccm.

-Josh

[Former Member]

Josh, i did a testo kinit.exe boadmin@mydomain.on.ca; it errort of Can not find resoure fro bundle..

Canot get the kdc for the realm MYDOMAIN.. any  idea?

Thanks

[former_member189884]

if kinit is failing make sure the case of the domains and machine names in the krb5 file are all in caps, and that the file is in the c:\windows directory, you should not need to include a domain in the kinit test if the default is correct, i.e kinit boadmin is enough.

-Josh

[Former Member]

Thanks Josh. not I got message says "KDC has no support for encryption type"

[former_member189884]

be sure your file has the rc4 type specified... for example:

[libdefaults]

default_realm = DOMAIN.COM

dns_lookup_kdc = true

dns_lookup_realm = true

udp_preference_limit = 1

default_tgs_enctypes = rc4-hmac

default_tkt_enctypes = rc4-hmac

[realms]

DOMAIN.COM = {

kdc = DCHOSTNAME.DOMAIN.COM

default_domain = DOMAIN.COM

}

[Former Member]

Thanks Josh, i changed the encryped to rc4-hmac, the kinit works and says"new tickets is stored in cache file.. but still can not login  from web portal .

[Former Member]

Also, Within the CCM  the word wide web publish service is not working, does it matter?

[former_member189884]

no this is IIS, I assume you are using Tomcat.

[former_member189884]

Have you tried the MANAGE severs option from within the CCM and login as an AD user there? This removes the Java portion of the setup and greatly reduces the potential trouble spots.

-Josh

[former_member185603]

Are you getting this error while logging to webi or desktop tool?

Search in this forum, you will get many hits related to your issue.

[Former Member]

Thanks Jawahar, i got this messages when log in from web portal..i have looked for the same issue in the forum and tried, but still . it was working fine before May last year. Also, we dont have TOMCAT installed in the server comparing to the case logged in the forum with same issue.