Re: Kerberos Issue

From: Arek Iskra [MVP] (NoSpam_arek_at_arekiskra.com)
Date: 04/06/05 

Date: Wed, 6 Apr 2005 20:10:31 +0800

Check out EventID.net, there's plenty on this error:
http://www.eventid.net/display.asp?eventid=675&eventno=62&source=Security&phase=1 

-- 
Arek Iskra
MVP for Windows Server - Software Distribution
"Ralish" <Ralish@discussions.microsoft.com> wrote in message 
news:07E1B94A-C934-41E7-804C-7D16900A01A8@microsoft.com...
>I have been tearing my hair out over an issue with this Windows Server 2003
> machine for days now. Thankfully, I have made some progress in diagnosing 
> the
> problem, but I am unsure how to proceed.
>
> In short, the Active Directory service starts up, but is unable to load 
> the
> global catalog - citing access denied.
>
> Furthermore, as a result, all services that depend on Active Directory, 
> such
> as DNS, DHCP, Certificate Services, etc... are unable to establish
> communication and fail as well.
>
> I have tracked the issue down to an authentication issue with Kerberos.
>
> The system appears to be unable to authenticate as itself, with the 
> Security
> Log flooded with Events from 'Security' with Event ID '675':
>
> Pre-authentication failed:
>  User Name: LFN-SVR-1$
>  User ID: LFN\LFN-SVR-1$
>  Service Name: krbtgt/LFN.NET
>  Pre-Authentication Type: 0x2
>  Failure Code: 0x18
>  Client Address: 127.0.0.1
>
> LFN-SVR-1 is the name of the machine and LFN is the short domain name.
>
> I have also downloaded the MS Resource Tools Kit - and used klist.exe.
>
> klist tickets - Informs me that there are 0 cached tickets...
> klist tgt - 'Error calling function LsaCallAuthenticationPackage: 0
> The operation completed successfully.
> Substatus: 0x8009030e
>
> Any and all help would be greatly appreciated in solving this problem.
>
> Yours hopefully,
>
> Ralish

Relevant Pages

  • Re: CIFS and Windows Server 2003
    ... Are you using kerberos for the authentication from HPUX? ... Windows Server 2003 drops one or more of the more insecure kerberos mechanisms. ...
    (microsoft.public.windows.server.active_directory)
  • Unneccessary Authenitication Dialogs
    ... Windows Server 2003 - basic installation, ... ASP.NET intranet site utilizing Windows Authentication ...
    (microsoft.public.windows.server.security)
  • Re: looking for a group calendaring system - any suggestions
    ... Currently using windows server 2003 for authentication. ... First thoughts were to use a Linux system because I do not believe I can find a low cost or open source product that runs on windows. ... plays harp for food, ...
    (RedHat)
  • Re: Members only with Frontpage
    ... already authenticated by a Windows server. ... I'm trying to create a members ... "Jim Buyens" wrote in message ... > Securing Web Pages With Windows Authentication ...
    (microsoft.public.frontpage.client)