kerberos error

  • Thread starter Thread starter J
  • Start date Start date
J

J

Guest
I am a bit confused by the kerberos help message. there is no web services
on this server but I get

Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 4
Date: 2008-08-07
Time: 07:53:35
User: N/A
Computer: mysvr01
Description:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/mysvr01.mydomain.local. The target name used was
LDAP/fbce4a49-6f53-42dc-b997-322b82a349e0._msdcs.mydomain.local. This
indicates that the password used to encrypt the kerberos service ticket is
different than that on the target server. Commonly, this is due to
identically named machine accounts in the target realm (mydomain.LOCAL),
and the client realm. Please contact your system administrator.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

which machine account do I need to fix and what is the client realm?
 
Re: kerberos error

Hello J,

Search on this page for KRB_AP_ERR_MODIFIED :
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I am a bit confused by the kerberos help message. there is no web
> services on this server but I get
>
> Event Type: Error
> Event Source: Kerberos
> Event Category: None
> Event ID: 4
> Date: 2008-08-07
> Time: 07:53:35
> User: N/A
> Computer: mysvr01
> Description:
> The kerberos client received a KRB_AP_ERR_MODIFIED error from the
> server
> host/mysvr01.mydomain.local. The target name used was
> LDAP/fbce4a49-6f53-42dc-b997-322b82a349e0._msdcs.mydomain.local. This
> indicates that the password used to encrypt the kerberos service
> ticket is
> different than that on the target server. Commonly, this is due to
> identically named machine accounts in the target realm
> (mydomain.LOCAL),
> and the client realm. Please contact your system administrator.
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> which machine account do I need to fix and what is the client realm?
>
 
Re: kerberos error

Hi J,

try a password reset of the machine account see KB, i got this error on my
DC that was turned off for a long time, i got that error event ID you showed.

http://support.microsoft.com/kb/260575

DC was unable to replicate.



--
JamesRussel
Cebu


"Meinolf Weber" wrote:

> Hello J,
>
> Search on this page for KRB_AP_ERR_MODIFIED :
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > I am a bit confused by the kerberos help message. there is no web
> > services on this server but I get
> >
> > Event Type: Error
> > Event Source: Kerberos
> > Event Category: None
> > Event ID: 4
> > Date: 2008-08-07
> > Time: 07:53:35
> > User: N/A
> > Computer: mysvr01
> > Description:
> > The kerberos client received a KRB_AP_ERR_MODIFIED error from the
> > server
> > host/mysvr01.mydomain.local. The target name used was
> > LDAP/fbce4a49-6f53-42dc-b997-322b82a349e0._msdcs.mydomain.local. This
> > indicates that the password used to encrypt the kerberos service
> > ticket is
> > different than that on the target server. Commonly, this is due to
> > identically named machine accounts in the target realm
> > (mydomain.LOCAL),
> > and the client realm. Please contact your system administrator.
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> > which machine account do I need to fix and what is the client realm?
> >
>
>
>
 
Back
Top