Windows API InitializeSecurityContext throws 0x80090311 error in a cross domain env

Gong, Allen 95 Reputation points
2024-07-24T09:21:23.09+00:00

I have a multiple domains environment, here is my setup:

  • Two AD server, one is for domain b1cloud.com, other one is for customer.com
  • Setup the domain trust that b1cloud.com trusts customer.com
  • One windows server (MYMACHINE) join domain b1cloud.com
  • Create a user ccmanager in domain customer.com
  • Add the remote privilege of window server MYMACHINE to user ccmanager of domain customer.com

After setup done, I can login windows server MYCHAMINE with user ccmanager of domain customer.com successfully, but I can not call the Windows system API InitializeSecurityContext, actually this API throws error with code 0x80090311, I use ccmanager@customer.com as the SPN for the input parameter "pszTargetName" of this API, can someone tell me is there anything wrong about my setup or input parameters? Any comment is appreciated and thanks in advance.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,637 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,782 questions
0 comments No comments
{count} votes