The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/cmhback01.bod.com. The target name used was RPCSS/deldc1.bod.com

I am getting error after error -

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/cmhback01.bod.com.  The target name used was RPCSS/deldc1.bod.com. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named  machine accounts in the target realm (BOD.COM), and the client realm.   Please contact your system administrator.

I am looking through some other posts and not sure that I get what they are instrcuting the others to do.

thanks
yostnetAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yostnetAuthor Commented:
I did find Post 19862104 -- there was a script mentioned in the post.

I downloaded the script and ran it. This is the result.

servicePrincipalName: =-
      CN=CMHSEC,OU=Domain Controllers,DC=Bod,DC=com
      CN=CMHSEC,OU=Domain Controllers,DC=Bod,DC=com
      CN=CMHDC1,OU=Domain Controllers,DC=Bod,DC=com
      CN=CMHDC1,OU=Domain Controllers,DC=Bod,DC=com
      CN=DELSVR,OU=Domain Controllers,DC=Bod,DC=com
      CN=DELSVR,OU=Domain Controllers,DC=Bod,DC=com
      CN=CMHDC1A,CN=Computers,DC=Bod,DC=com
      CN=SPARE-072SLQI0L,CN=Computers,DC=Bod,DC=com

Not sure what this tells me though
0
Rachel FlewellingCommented:
I'm glad i found this post.  I too am receiving Event ID 4.  I have google searched and found many causes of this issue.  After looking at many posts on other forums, i think it's important to note what is stated after "The target name used was xxxxx/deldc1.bod.com.   For example, some posts had "cifs" in the place of xxxxx, and yours has "RPCSS"     Mine, has nothing.  here is mine:

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/exch11.pr-na.com.  The target name used was exch01. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named  machine accounts in the target realm (DOMAIN.COM), and the client realm.   Please contact your system administrator.

It's interesting to note, that in my situation, exch11 is a cluster node, holding the exchange instance called exch01.  I have the exact message for another node in the same cluster and it's instance (exch12 holding instance exch02).

Here are posts i've found on this.  I don't endorse doing any of the following, it's just research.
http://www.petri.co.il/forums/showthread.php?t=10487
http://www.itnewsgroups.net/group/microsoft.public.windows.server.general/topic25142.aspx
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-08/0427.html

I Don't mean to piggy back on your question, but it seemed similar and thought i would mention it. I have yet to try anything regarding my error, as this is a production Exchange 2003 cluster environment, and other than this error message, things seem to be running ok.

-I have checked my forward and reverse DNS entries for all the above names.
-I did read in one of the above links, that it could be caused by one DC having password issues with it's domain object.  I find that possible, as we have many many DCs in the site that our Exchange is in.  But i'm weary to just go reseting passwords on DC accounts for many reasons.


0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Rachel FlewellingCommented:
Yostnet,  can you direct me to the script you mentioned?  i cannot find post # 19862104
0
yostnetAuthor Commented:
Great Work
0
HelpyHelpertonCommented:
prna, this may be the link he was talking about...there is a script specified in it:
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_22818034.html 
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.