Solved

Kerberos error

Posted on 2009-07-09
3
579 Views
Last Modified: 2012-05-07
Hi all,

I am running a DC on Windows 2003 and my System Event Viewer is full of Kerberos error .... it doesn't seem to affect anything but I want to make sure these eror won't lead to anything else.

Event Type:      Error
Event Source:      Kerberos
Event Category:      None
Event ID:      3
Date:            7/9/2009
Time:            1:12:13 AM
User:            N/A
Computer:      NMMC-DC
Description:
A Kerberos Error Message was received:
         on logon session
 Client Time:
 Server Time: 5:12:13.0000 7/9/2009 Z
 Error Code: 0xd KDC_ERR_BADOPTION
 Extended Error: 0xc00000bb KLIN(0)
 Client Realm:
 Client Name:
 Server Realm: NMMC-NET.LOCAL
 Server Name: host/nmmc-dc.nmmc-net.local
 Target Name: host/nmmc-dc.nmmc-net.local@NMMC-NET.LOCAL
 Error Text:
 File: 9
 Line: ae0
 Error Data is in record data.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 30 15 a1 03 02 01 03 a2   0.¡....¢
0008: 0e 04 0c bb 00 00 c0 00   ...»..À.
0010: 00 00 00 03 00 00 00      .......


Also I setup another DC for redundancy and made it a glaobal catalog and all but I can't seem to connect to it when the main DC is down. I don't know if this could be related.
0
Comment
Question by:nmmcfk
3 Comments
 
LVL 26

Accepted Solution

by:
Pber earned 250 total points
ID: 24812984
See this regarding the Kerberos errors:
http://mailman.mit.edu/pipermail/kerberos/2005-February/007231.html

http://technet2.microsoft.com/windowsserver/en/library/b36b8071-3cc5-46fa-be13-280aa43f2fd21033.mspx?mfr=true

Running kerbtray and purging the tickets has worked for me in the past.

kerbtray is part of these tools:
http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en

As far as your 2nd DC not picking up,   It may be the clients need to point to the 2nd DC for DNS (it is desired to have your your DCs as AD integrated DNS servers.  See this:
http://www.pberblog.com/post/2009/06/09/DC-failed-second-DC-not-authenticating-users.aspx
 
0
 

Author Comment

by:nmmcfk
ID: 24860983
OK I will see what I can do with that .... thanks for the info and i will kep you guys posted.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now