Link to home
Start Free TrialLog in
Avatar of SV-IT
SV-IT

asked on

How do I fix a kerberos event ID 4?

Every few hours one workstation on our network receives the following error:

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/wolffterm01.wolffdomain.local.  This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named  machine accounts in the target realm (WOLFFDOMAIN.LOCAL), and the client realm.   Please contact your system administrator.

How do I fix this and would this cause a database application to crash?
Avatar of *** Hopeleonie ***
*** Hopeleonie ***
Flag of Switzerland image

can you add the event source from the eventid?
ASKER CERTIFIED SOLUTION
Avatar of Kamran Arshad
Kamran Arshad
Flag of Pakistan image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of SV-IT
SV-IT

ASKER

After digging through the server I discovered that there was a persistent W32Time event id 36 in the logs. I traced that to the w32time service being disabled on the DC. I enabled the service and rebooted the server and workstation for good measure. This corrected the Kerb ticket mismatch.
Avatar of SV-IT

ASKER

I found that w32time was disable on the server which was cause the issue.