We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

KDC Error in System Log of SBS 2003 SP2 DC

Patt5735
Patt5735 asked
on
Medium Priority
759 Views
Last Modified: 2012-05-11
Repeated in a continuous loop every 20 minutes or so . . .

"There are multiple accounts with name cifs/cccvr01.ccc.local of type DS_SERVICE_PRINCIPAL_NAME"

"There are multiple accounts with name host/cccvr01.ccc.local of type DS_SERVICE_PRINCIPAL_NAME"

"There are multiple accounts with name RPCSS/cccvr01.ccc.local of type DS_SERVICE_PRINCIPAL_NAME"
Comment
Watch Question

Author

Commented:
I did see that article.  The problem that I have is that they don't actually provide a solution.  Those three methods just help in searching for a duplicate.  But once you find a duplicate, what do you actually do to resolve it?

Author

Commented:
In the meantime, I'm going to search again using those methods.  The results given by their tools are not very clear to me.

Author

Commented:
Perhaps you can help me discipher this.  This is the output from Microsoft's method two:


dn: CN=CCCSVR01,OU=Domain Controllers,DC=CCC,DC=local
changetype: add
servicePrincipalName: MSSQLSvc/cccsvr01.CCC.local
servicePrincipalName:
 VProRecovery Backup Exec System Recovery Agent 9.0/cccsvr01.CCC.local
servicePrincipalName:
 VProRecovery Backup Exec System Recovery Agent 8.5/cccsvr01.CCC.local
servicePrincipalName:
 VProRecovery Backup Exec System Recovery Agent 8.0/cccsvr01.CCC.local
servicePrincipalName: http/crm
servicePrincipalName: http/cccsvr01.ccc.local
servicePrincipalName: http/cccsvr01
servicePrincipalName:
 VProRecovery Backup Exec System Recovery Agent 7.0/cccsvr01.CCC.local
servicePrincipalName: {14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/CCCSVR01
servicePrincipalName:
 {14E52635-0A95-4a5c-BDB1-E0D0C703B6C8}/cccsvr01.CCC.local
servicePrincipalName: exchangeMDB/cccsvr01.CCC.local
servicePrincipalName: exchangeMDB/CCCSVR01
servicePrincipalName: exchangeRFR/cccsvr01.CCC.local
servicePrincipalName: exchangeRFR/CCCSVR01
servicePrincipalName: exchangeAB/CCCSVR01
servicePrincipalName: exchangeAB/cccsvr01.CCC.local
servicePrincipalName: SMTPSVC/CCCSVR01
servicePrincipalName: SMTPSVC/cccsvr01.CCC.local
servicePrincipalName:
 NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/cccsvr01.CCC.local
servicePrincipalName: ldap/cccsvr01.CCC.local/ForestDnsZones.CCC.local
servicePrincipalName: GC/cccsvr01.CCC.local/CCC.local
servicePrincipalName: HOST/cccsvr01.CCC.local/CCC
servicePrincipalName: HOST/CCCSVR01
servicePrincipalName: HOST/cccsvr01.CCC.local
servicePrincipalName: HOST/cccsvr01.CCC.local/CCC.local
servicePrincipalName:
 E3514235-4B06-11D1-AB04-00C04FC2DCD2/dd370d98-f771-4746-a7d2-b52924e465d1/CCC.
 local
servicePrincipalName:
 ldap/dd370d98-f771-4746-a7d2-b52924e465d1._msdcs.CCC.local
servicePrincipalName: ldap/cccsvr01.CCC.local/CCC
servicePrincipalName: ldap/CCCSVR01
servicePrincipalName: ldap/cccsvr01.CCC.local
servicePrincipalName: ldap/cccsvr01.CCC.local/DomainDnsZones.CCC.local
servicePrincipalName: ldap/cccsvr01.CCC.local/CCC.local
servicePrincipalName: DNS/cccsvr01.CCC.local

dn: CN=CRM Admin,CN=Users,DC=CCC,DC=local
changetype: add
servicePrincipalName: MSSQLSvc/cccsvr02.CCC.local:1433
servicePrincipalName: HOST/CCCSVR01
servicePrincipalName: HOST/cccsvr01.CCC.local

Author

Commented:
I ran "setspn -r cccsv01"  ...  waiting to see if that resolves the error(s).

Author

Commented:
"setspn -r cccsvr01" did not resolve the issue.  The machine that is throwing the errors is our DC, so it can't be removed from the domain.  What's the next step?

Author

Commented:
Updated the setspn tool with the new version to enable the "find duplicate entries" switch... the result...

C:\Documents and Settings\Administrator>setspn -x
Processing entry 0
HOST/cccsvr01.CCC.local is registered on these accounts:
    CN=CRM Admin,CN=Users,DC=CCC,DC=local
    CN=CCCSVR01,OU=Domain Controllers,DC=CCC,DC=local

HOST/CCCSVR01 is registered on these accounts:
    CN=CRM Admin,CN=Users,DC=CCC,DC=local
    CN=CCCSVR01,OU=Domain Controllers,DC=CCC,DC=local

found 2 groups of duplicate SPNs.

Author

Commented:
setspn -d cccsvr01 ... successful

setspn -x

Processing entry 0
HOST/cccsvr01.CCC.local is registered on these accounts:
    CN=CRM Admin,CN=Users,DC=CCC,DC=local
    CN=CCCSVR01,OU=Domain Controllers,DC=CCC,DC=local

found 1 group of duplicate SPNs.
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview

Author

Commented:
The issue is resolved.
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.