Kerberos Issues

From: Nick O'Connor (nick.oconnor_at_sphs.com)
Date: 06/16/03 

Date: Mon, 16 Jun 2003 06:19:00 -0700

I get a ton of Kerberos event log items. I have turned on
the additional event logging to hopefully get more
information. I will post what I am seeing below, I can't
seem to find anything useful in the Knowledge Base.

Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 4
Date: 6/16/2003
Time: 8:14:55 AM
User: N/A
Computer: MCKINLEY
Description:
The function InitializeSecurityContext received a Kerberos
Error Message:
         on logon session
 Client Time:
 Server Time: 12:14:55.0000 6/16/2003 (null)
 Error Code: 0x20 KRB_AP_ERR_TKT_EXPIRED
 Client Realm:
 Client Name:
 Server Realm: SPHS.COM
 Server Name: krbtgt/SPHS.COM
 Target Name: krbtgt/SPHS.COM@SPHS.COM
 Error Text:
 File:
 Line:
 Error Data is in record data.

The second one I see alot is:

Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 4
Date: 6/16/2003
Time: 8:07:38 AM
User: N/A
Computer: MCKINLEY
Description:
The function InitializeSecurityContext received a Kerberos
Error Message:
         on logon session
 Client Time:
 Server Time: 12:7:38.0000 6/16/2003 (null)
 Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
 Client Realm:
 Client Name:
 Server Realm: SPHS.COM
 Server Name: krbtgt/SPHS.COM
 Target Name: HOST/WKS1631150001@SPHS.COM
 Error Text:
 File:
 Line:
 Error Data is in record data.

Any help would be appreciated.

Relevant Pages

  • Re: Event ID 3 Kerberos KDC_ERR_S_PRINCICAL_UNKNOWN
    ... You can enable tracing on Kerberos to see if you can determine what is going ... Server Realm: domain.com ... Error Data is in record data." ...
    (microsoft.public.windows.server.active_directory)
  • Re: Kerberos Issues
    ... > I get a ton of Kerberos event log items. ... > Client Realm: ... > Error Data is in record data. ...
    (microsoft.public.win2000.security)
  • Re: Kerberos Query
    ... Thanks for the Kerberos logging tip Paul - I've now got some event log errors ... Client Realm: ... Server Realm: DOMAIN.COM ... Error Data is in record data. ...
    (microsoft.public.windows.server.active_directory)
  • Kerberos Errors
    ... switched Kerberos login on and get the following error - has ... Client Realm: ... Server Realm: GDMCKEE.HOME ... Error Data is in record data. ...
    (microsoft.public.windows.server.general)
  • Re: Security Log Event
    ... I enabled Kerberos logging and recieved this error ... Client Realm: ... Server Realm: BRIGIDCOLLINS.LOCAL ... Error Data is in record data. ...
    (microsoft.public.windows.server.sbs)