Re: Kerberos Event ID 4

From: g (g_at_g.com)
Date: 01/06/04


Date: Tue, 06 Jan 2004 16:02:26 GMT


Hi i am getting the same error but event id 594.
So is a few other people, all with iis and ad. My error happens to be on a
iis/ap/db server. No fix so far. Broken patch? Mine started within the
last couple of weeks.

On Tue, 06 Jan 2004 06:54:55 -0800, Jeff wrote:

> I have a 2000 server with ISA installed. It acts as our
> firewall and proxy. It also has a company Intranet on it.
> Our internal network has a 2000 DNS server. Our companies
> internal domain name is PAI. There is another company out
> in the world with the internet domain name of pai.com. My
> event log on the 2000 server with isa creates 4 events
> every 30 seconds or so with the below event message
>
> The function InitializeSecurityContext received a Kerberos
> Error Message:
> on logon session
> Client Time:
> Server Time: 14:37:7.0000 1/6/2004 (null)
> Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
> Client Realm:
> Client Name:
> Server Realm: PAI.COM
> Server Name: krbtgt/PAI.COM
> Target Name: DNS/hns1.newedgenetworks.com@PAI.COM
> Error Text:
> File:
> Line:
> Error Data is in record data.
>
> Sometimes the target name is differant, but I think it is
> still our isp's dns servers. My thought on this is that
> something is escaping my network and trying to
> authenticate to this external PAI.com domain since my
> internal domain name is pai.com. The problem is I don't
> know where to look for this problem. Should I look in our
> dns, should I put in some type of filter, etc...
>
> Any suggestions?
>
> Thanks,



Relevant Pages

  • Re: GPO problems
    ... It was the ISA 2004 firewall client. ... DNS settings and network properties on the server and client computers. ... > Service of SBS is configured to be the DNS server on the problematic ...
    (microsoft.public.windows.server.sbs)
  • Re: Any known issues withsp2 and non-sp xp ics?
    ... Default Gateway: none ... DNS Server: 192.168.0.1 or your ISP's DNS server ... as my isp is configured to use DHCP (Dynamic Host ... After doing the above changes to the client, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Windows 2003 Question - doing some part time work for a friend
    ... Go to the properties of TCP/IP for the network adapter connecting the client ... using your ISP's DNS server as alternate will cause another set of problems. ... Register those sensitive private SRV records on a server under your ...
    (microsoft.public.windows.server.general)
  • Re: DNS resolves wrong when vpn connects
    ... It involves a registry edit for the VPN client, ... correctly resolving the public DNS name to the internal IP when ... DNS server as their local DNS (i.e. if the local DHCP is passing out a public ... If your internal infrastructure is using one of those ranges, ...
    (microsoft.public.win2000.dns)
  • Re: Any known issues withsp2 and non-sp xp ics?
    ... DNS Server: 192.168.0.1 or your ISP's DNS server ... After doing the above changes to the client, ... occured because the network did not assign a network address to the computer. ... assigned to another adapter 'realtek...''realtek ethernet adapter' is hidden ...
    (microsoft.public.windowsxp.network_web)