Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Kerberos error
Kerberos error [message #160286] Mon, 24 August 2009 12:01 Go to next message
Sawyer  is currently offline Sawyer
Messages: 315
Registered: July 2009
Senior Member
Hello all

The server is windows 2003 sp2 64 bit. The domain is AD 2003 native mode, I
am seeing alot of kerberos errors on this server that mention a workstations
name as the "target name used" In the below error message the workstation is
osolos-d820$. To me this looks more like a DNS issue with the workstation
rather than a kerberos DNS issue with the server. The server is not running
any service accounts, it could be that the workstationA is registering its
name in DNS, and then another workstation registers its own name
workstationB, but with the same ip as workstationA

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
OSOLOS-D820$. The target name used was . This indicates that the password
used to encrypt the kerberos service ticket is different than that on the
target server. Commonly, this is due to identically named machine accounts
in the target realm (CORP.KBB.COM), and the client realm. Please contact
your system administrator.

Any help on this is greatly appreciated
Re: Kerberos error [message #160291 is a reply to message #160286] Mon, 24 August 2009 12:38 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello Sawyer,

Start here:
http://support.microsoft.com/kb/558115

http://www.eventid.net/display.asp?eventid=4&eventno=196 8&source=Kerberos&phase=1

http://technet.microsoft.com/en-us/library/cc733987(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello all
>
> The server is windows 2003 sp2 64 bit. The domain is AD 2003 native
> mode, I am seeing alot of kerberos errors on this server that mention
> a workstations name as the "target name used" In the below error
> message the workstation is osolos-d820$. To me this looks more like a
> DNS issue with the workstation rather than a kerberos DNS issue with
> the server. The server is not running any service accounts, it could
> be that the workstationA is registering its name in DNS, and then
> another workstation registers its own name workstationB, but with the
> same ip as workstationA
>
> The kerberos client received a KRB_AP_ERR_MODIFIED error from the
> server OSOLOS-D820$. The target name used was . This indicates that
> the password used to encrypt the kerberos service ticket is different
> than that on the target server. Commonly, this is due to identically
> named machine accounts in the target realm (CORP.KBB.COM), and the
> client realm. Please contact your system administrator.
>
> Any help on this is greatly appreciated
>
Re: Kerberos error [message #160301 is a reply to message #160286] Mon, 24 August 2009 13:07 Go to previous message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Sawyer schrieb:
> The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
> OSOLOS-D820$. The target name used was . This indicates that the
> password used to encrypt the kerberos service ticket is different than
> that on the target server. Commonly, this is due to identically named
> machine accounts in the target realm (CORP.KBB.COM), and the client
> realm. Please contact your system administrator.

Check the DNS records the DNS servers have of the workstation. Is that
workstation known with multiple hostnames/SPNs?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Previous Topic:Exchge2007 email failing due to Active Dir DB issue after 2008DB s
Next Topic:Change Domain Name
Goto Forum:
  


Current Time: Tue Jan 23 16:35:35 MST 2018

Total time taken to generate the page: 0.13887 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software