• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1100
  • Last Modified:

How do I fix a kerberos event ID 4?

Every few hours one workstation on our network receives the following error:

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/wolffterm01.wolffdomain.local.  This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named  machine accounts in the target realm (WOLFFDOMAIN.LOCAL), and the client realm.   Please contact your system administrator.

How do I fix this and would this cause a database application to crash?
  • 2
1 Solution
*** Hopeleonie ***IT ManagerCommented:
can you add the event source from the eventid?
Kamran ArshadIT AssociateCommented:

Please read the below comments;

SV-ITAuthor Commented:
After digging through the server I discovered that there was a persistent W32Time event id 36 in the logs. I traced that to the w32time service being disabled on the DC. I enabled the service and rebooted the server and workstation for good measure. This corrected the Kerb ticket mismatch.
SV-ITAuthor Commented:
I found that w32time was disable on the server which was cause the issue.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now