Front Page cannot authenticate with IIS 6 on Windows 2003

Archived from groups: microsoft.public.win2000.security (More info?)

I have a two domain environment with a domain MASTER and a subdomain
INTERNET. User accounts are in MASTER, and a WIndows 2003 Server with IIS 6
is in INTERNET.

Users can log onto the conolse of the server, and they can Terminal Service
in using their accounts from the MASTER domain.

However, when they attempt to connect to this IIS 6 server via Front Page,
their MASTER accounts do not work and the following appears in the system log
for the server:

Event ID: 7, Source: Kerberos, Description: The Kerberos subsystem
encountered a PAC verificatino failure. This indicates that the PAC from the
client MBAnd in realm MASTER.Blah.com had a PAC which failed to verify or was
modified. Contact your system administrator.

I have tried the fix referenced in KnowledgeBase article: 883268 but all
these servcies appear to be running as SHARED.

Any ideas?

Thansk,

Matt
bandom@(remove) csctechnologies.com

Archived from groups: microsoft.public.win2000.security (More info?)

Removed the server from the Active Directory dmoain, and then added it back
and everything is now fine.

"Matthew Bando" wrote:

> I forot to mention that both Active Directory domains have domain controllers
> running Windows 2000.
>
> "Matthew Bando" wrote:
>
> > I have a two domain environment with a domain MASTER and a subdomain
> > INTERNET. User accounts are in MASTER, and a WIndows 2003 Server with IIS 6
> > is in INTERNET.
> >
> > Users can log onto the conolse of the server, and they can Terminal Service
> > in using their accounts from the MASTER domain.
> >
> > However, when they attempt to connect to this IIS 6 server via Front Page,
> > their MASTER accounts do not work and the following appears in the system log
> > for the server:
> >
> > Event ID: 7, Source: Kerberos, Description: The Kerberos subsystem
> > encountered a PAC verificatino failure. This indicates that the PAC from the
> > client MBAnd in realm MASTER.Blah.com had a PAC which failed to verify or was
> > modified. Contact your system administrator.
> >
> > I have tried the fix referenced in KnowledgeBase article: 883268 but all
> > these servcies appear to be running as SHARED.
> >
> > Any ideas?
> >
> > Thansk,
> >
> > Matt
> > bandom@(remove) csctechnologies.com
> >