kerberos error

[Guest J]

I am a bit confused by the kerberos help message. there is no web services

on this server but I get

 

Event Type: Error

Event Source: Kerberos

Event Category: None

Event ID: 4

Date: 2008-08-07

Time: 07:53:35

User: N/A

Computer: mysvr01

Description:

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server

host/mysvr01.mydomain.local. The target name used was

LDAP/fbce4a49-6f53-42dc-b997-322b82a349e0._msdcs.mydomain.local. This

indicates that the password used to encrypt the kerberos service ticket is

different than that on the target server. Commonly, this is due to

identically named machine accounts in the target realm (mydomain.LOCAL),

and the client realm. Please contact your system administrator.

 

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

 

which machine account do I need to fix and what is the client realm?

[Guest Meinolf Weber]

Re: kerberos error

 

Hello J,

 

Search on this page for KRB_AP_ERR_MODIFIED :

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I am a bit confused by the kerberos help message. there is no web

> services on this server but I get

>

> Event Type: Error

> Event Source: Kerberos

> Event Category: None

> Event ID: 4

> Date: 2008-08-07

> Time: 07:53:35

> User: N/A

> Computer: mysvr01

> Description:

> The kerberos client received a KRB_AP_ERR_MODIFIED error from the

> server

> host/mysvr01.mydomain.local. The target name used was

> LDAP/fbce4a49-6f53-42dc-b997-322b82a349e0._msdcs.mydomain.local. This

> indicates that the password used to encrypt the kerberos service

> ticket is

> different than that on the target server. Commonly, this is due to

> identically named machine accounts in the target realm

> (mydomain.LOCAL),

> and the client realm. Please contact your system administrator.

> For more information, see Help and Support Center at

> http://go.microsoft.com/fwlink/events.asp.

>

> which machine account do I need to fix and what is the client realm?

>

[Guest JamesRussel]

Re: kerberos error

 

Hi J,

 

try a password reset of the machine account see KB, i got this error on my

DC that was turned off for a long time, i got that error event ID you showed.

 

http://support.microsoft.com/kb/260575

 

DC was unable to replicate.

 

 

 

--

JamesRussel

Cebu

 

 

"Meinolf Weber" wrote:

> Hello J,

>

> Search on this page for KRB_AP_ERR_MODIFIED :

> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > I am a bit confused by the kerberos help message. there is no web

> > services on this server but I get

> >

> > Event Type: Error

> > Event Source: Kerberos

> > Event Category: None

> > Event ID: 4

> > Date: 2008-08-07

> > Time: 07:53:35

> > User: N/A

> > Computer: mysvr01

> > Description:

> > The kerberos client received a KRB_AP_ERR_MODIFIED error from the

> > server

> > host/mysvr01.mydomain.local. The target name used was

> > LDAP/fbce4a49-6f53-42dc-b997-322b82a349e0._msdcs.mydomain.local. This

> > indicates that the password used to encrypt the kerberos service

> > ticket is

> > different than that on the target server. Commonly, this is due to

> > identically named machine accounts in the target realm

> > (mydomain.LOCAL),

> > and the client realm. Please contact your system administrator.

> > For more information, see Help and Support Center at

> > http://go.microsoft.com/fwlink/events.asp.

> >

> > which machine account do I need to fix and what is the client realm?

> >

>

>

>