Kerberos Error Question

From: PC (paulm)
Date: 09/16/04


Date: Thu, 16 Sep 2004 10:13:57 +0100

Hi,

I've turned on Kerberos logging to help diagnose a problem I've been having
but the error I'm receiving has me a bit puzzled. The error is as follows:

 Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 594
Date: 15/09/2004
Time: 11:57:41
User: N/A
Computer: ServerName
Description:
A Kerberos Error Message was received:
         on logon session InitializeSecurityContext
 Client Time:
 Server Time:
 Error Code: 10:57:41.0000 9/15/2004 (null) 0x20
 Extended Error: KRB_AP_ERR_TKT_EXPIRED
 Client Realm:
 Client Name:
 Server Realm: DomainName
 Server Name: krbtgt/DomainName
 Target Name: krbtgt/DomainName@DomainName
 Error Text:
 File:
 Line:
 Error Data is in record data.

As you can see there is a discrepancy above where event viewer on the server
shows the Time of the error as 11:57:41 but the Kerberos error code shows
the time as 10:57:41.

There is no time discrepancy on this server (i.e. net time command displays
the correct time).

"Adjust for Daylight Saving time" is selected on this server so the time
displayed is one hour ahead of the actual time (GMT in my case) Could this
be the reason for the apparent discrepancy above?

Thanks



Relevant Pages

  • Re: Cannot telnet some ports
    ... Some with remote administration feature I believe. ... POP3 Server 110 ... # Network services, Internet style ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Cannot telnet some ports
    ... Some with remote administration feature I believe. ... >> From a Windows 2003 Server SP2 ... >> fromn the 2k3 serrver but can telnet into any other port. ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Kerberos logon to Terminal Server prevents folder redirection
    ... Pass-through refers to the client browser passing through credentials to the Web Interface server; so you can still use Pass-through without enabling the option "Use Kerberos authentication to connect to servers". ...
    (microsoft.public.windows.server.security)
  • Re: Cannot telnet some ports - OT
    ... why would any one still want to allow telnet into server? ... Some with remote administration feature I believe. ... fromn the 2k3 serrver but can telnet into any other port. ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Cannot telnet some ports - OT
    ... why would any one still want to allow telnet into server? ... Some with remote administration feature I believe. ... fromn the 2k3 serrver but can telnet into any other port. ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)