lots of kerberos errors....

From: Al Blake (al_at_blakes.net)
Date: 07/29/04

  • Next message: Zé: "SBS remote access issue"
    Date: Thu, 29 Jul 2004 17:04:38 +1000
    
    

    Running Win2k3 native mode on our member (application) server I see the
    following in the event log:

    Event Type: Error
    Event Source: Kerberos
    Event Category: None
    Event ID: 3
    Date: 29/07/2004
    Time: 4:51:17 PM
    User: N/A
    Computer: ATHENA
    Description:
    A Kerberos Error Message was received:
             on logon session
     Client Time:
     Server Time: 6:51:17.0000 7/29/2004 Z
     Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
     Extended Error:
     Client Realm:
     Client Name:
     Server Realm: OUR.DOMAIN
     Server Name: cifs/192.168.31.10
     Target Name: cifs/192.168.31.10@OUR.DOMAIN
     Error Text:
     File: 9
     Line: ab8
     Error Data is in record data.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    Now the bizzarre thing here is that the IP in question is NOT one that
    belongs to this application server (it's our mail server). I tried working
    through the kerberos troubleshooting guide but got pretty confused ;)
    Why would the application server (on 192.168.31.4) be complaining that it
    doesnt have an SPN for 192.168.31.10 ??? That's not its IP.
    What is going on here?
    Any suggestions as to how I can troubleshoot this?

    Al Blake , canberra, Australia


  • Next message: Zé: "SBS remote access issue"

    Relevant Pages

    • Re: Kerberos authentication fails
      ... we had have kerberos log activated yesterday while we test the ... Client Server Name: ... * System Event logs in GPRSServer03 ... Server domain: DISTROMEL.GPRS ...
      (microsoft.public.sqlserver)
    • Re: Kerberos authentication fails
      ... we had have kerberos log activated yesterday while we test the ... Client Server Name: ... * System Event logs in GPRSServer03 ... Server domain: DISTROMEL.GPRS ...
      (microsoft.public.win2000.security)
    • Re: Server not found in Kerberos Database
      ... Server not found in Kerberos Database ... When I am trying to do a kinit on the client, ... I have a KDC on Win2003 and a client which is a Linux is trying = ...
      (comp.protocols.kerberos)
    • RE: Critical Errors in System Log
      ... EventID: 4 Source: Kerberos ... The kerberos client received a KRB_AP_ERR_MODIFIED error from the server ... the kerberos service ticket is different than that on the target server. ...
      (microsoft.public.windows.server.sbs)
    • Re: Date Time Synchonisation Failure
      ... Domain authentication relies on Kerberos and Kerberos relies on accurate ... If time between client and server is off be more then 5 ... > you might appreciate we need to change our client pcs time ...
      (microsoft.public.windows.server.general)