Ronni Mattsson: Issue with tracing kerberos when setting up Role Center use the Kerberos event logging

[Blog bot]

Источник: http://blogs.msdn.com/b/microsoft_dy...t-logging.aspx
==============

When setting up Role Center sometimes kerberos can be a little tricky, using the following registry changes has help me allot to track down the issues. Normally I use this on all the servers involved with Role center.

Microsoft Windows 2000, Windows Server 2003, and Windows Server 2008 offer the capability of tracing detailed Kerberos events through the event log mechanism. You can use this information when you troubleshoot Kerberos

Enabling Kerberos Event Logging on a Specific Computer

1. Start Registry Editor.

2. Add the following registry value:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters


Registry Value: LogLevel
Value Type: REG_DWORD
Value Data: 0x1

If the Parameters subkey does not exist, create it.

NoteRemove this registry value when it is no longer needed so that performance is not degraded on the computer. Also, you can remove this registry value to disable Kerberos event logging on a specific computer.

3. Quit Registry Editor. The setting will become effective immediately on Windows Server 2008, on Windows Vista, on Windows Server 2003, and on Windows XP. For Windows 2000, you must restart the computer.

You can find any Kerberos-related events in the system log.

....Happy hunting....




Источник: http://blogs.msdn.com/b/microsoft_dy...t-logging.aspx