Kerberos Error

From: Gordon Price (gordon(remove)@thomashacker.com)
Date: 10/03/02 

From: "Gordon Price" <gordon(remove)@thomashacker.com>
Date: Thu, 3 Oct 2002 10:53:45 -0700

We are getting regular Kerberos errors that don't seem to make any sense,
and after paying $99 to Microsoft, they can't come up with an answer. The
error event is listed below. I don't get the whole client realm/target realm
thing. The key to me is we have a server running Win2K with the default
install, and a WinXP Pro client with the default install. Anyone have any
ideas what the #$@! is going on? We are also getting problems where users
cannot brouse the network. They can go to a saved network place or mapped
drive, but trying to browse the network won't work. Doing a repair on the
network connection and rebooting fixes it, for a while. Any relationship to
the Kerberos thing perhaps?

Thanks in advance,
Gordon

-----------------------------------------------------------
Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 4
Date: 10/3/2002
Time: 10:45:02 AM
User: N/A
Computer: WKS_29
Description:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
SRV_1$. This indicates that the password used to encrypt the kerberos
service ticket is different than that on the target server. Commonly, this
is due to identically named machine accounts in the target realm
(THOMASHACKER.LOCAL), and the client realm. Please contact your system
administrator.

Relevant Pages

  • RE: Critical Errors in System Log
    ... EventID: 4 Source: Kerberos ... The kerberos client received a KRB_AP_ERR_MODIFIED error from the server ... the kerberos service ticket is different than that on the target server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Date Time Synchonisation Failure
    ... Domain authentication relies on Kerberos and Kerberos relies on accurate ... If time between client and server is off be more then 5 ... > you might appreciate we need to change our client pcs time ...
    (microsoft.public.windows.server.general)
  • Re: Kerberos Issues
    ... the ticket expired can happen if there is a time difference in the machine ... The event means the ticket you are presenting to your server has already ... > I get a ton of Kerberos event log items. ... > Client Realm: ...
    (microsoft.public.win2000.security)
  • Re: LDAP or Kerberos or am I all mixed up.
    ... > I am interested in establishing a single user login at my office that ... > has about 60 machines total running on the network. ... in to each application or server individually. ... see if they support LDAP or kerberos login. ...
    (RedHat)
  • Re: Kerberos Error
    ... Kerberos implementation. ... - The log indicates an account name collision in your domain. ... and a WinXP Pro client with the default install. ... They can go to a saved network place or mapped ...
    (microsoft.public.windowsxp.security_admin)