SV-IT
asked on
How do I fix a kerberos event ID 4?
Every few hours one workstation on our network receives the following error:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/wolffterm01.wolffdoma in.local. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (WOLFFDOMAIN.LOCAL), and the client realm. Please contact your system administrator.
How do I fix this and would this cause a database application to crash?
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/wolffterm01.wolffdoma
How do I fix this and would this cause a database application to crash?
can you add the event source from the eventid?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
After digging through the server I discovered that there was a persistent W32Time event id 36 in the logs. I traced that to the w32time service being disabled on the DC. I enabled the service and rebooted the server and workstation for good measure. This corrected the Kerb ticket mismatch.
ASKER
I found that w32time was disable on the server which was cause the issue.