asked on

The kerberos client received a KRB_AP_ERR_MODIFIED

HI

One of our W2K3 server has been disconnected from the network for a while and we are now gettings the following error in the Event log :
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/atlan-red01.atlanrs.com. The target name used was ldap/atlan-red01.AtlanRS.com/AtlanRS.com@AtlanRS.com. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (ATLANRS.COM), and the client realm. Please contact your system administrator.

could you direct me in the right direction ?

thanks

sirbob2000

Try this first, if that fails, most likely to be a DNS issue;

http://technet2.microsoft.com/windowsserver/en/library/579246c8-2e32-4282-bce7-3209d1ea8bf11033.mspx?mfr=true

quadrateksupport

ASKER

thanks,
I tried to use the ldifde command. I ran it on the PDC emulator and on the DC have problem with. I get the same result. It makes me think it is DNS related,

I set the default DC to use the PDC emulator for DNS. and I still get the same problem.

are you able to help ?

sirbob2000

Have a look at this first - fairly sure you may already have checked for this though;

http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=4&EvtSrc=Kerberos&LCID=1033

SOLUTION

sirbob2000

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

quadrateksupport

ASKER

I checked it, there is no duplicate

ASKER CERTIFIED SOLUTION