Solved

Security-Kerberos event 4

Posted on 2013-11-20
1
1,896 Views
Last Modified: 2014-04-30
Hi I'm receiving this error as below how can be fixed?

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/mailbesa.domain.besa.org.al. The target name used was DNS/mailbesa.domain.besa.org.al. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (DOMAIN.BESA.ORG.AL) is different from the client domain (DOMAIN.BESA.ORG.AL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.


- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-Security-Kerberos" Guid="{98E6CFCB-EE0A-41E0-A57B-622D4E1B30B1}" EventSourceName="Kerberos" />
  <EventID Qualifiers="16384">4</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2013-11-20T11:45:06.000000000Z" />
  <EventRecordID>165936</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>System</Channel>
  <Computer>mailbesa1.domain.besa.org.al</Computer>
  <Security />
  </System>
- <EventData>
  <Data Name="Server">host/mailbesa.domain.besa.org.al</Data>
  <Data Name="TargetRealm">DOMAIN.BESA.ORG.AL</Data>
  <Data Name="Targetname">ldap/mailbesa.domain.besa.org.al</Data>
  <Data Name="ClientRealm">DOMAIN.BESA.ORG.AL</Data>
  <Binary />
  </EventData>
  </Event>

Thank you
0
Comment
Question by:akokalari
1 Comment
 
LVL 2

Accepted Solution

by:
Chris Matthews earned 500 total points
ID: 39662680
Looks like a DNS issue.  Delete all non static dns entries in the zone and reverse zone.  Set DHCP to update DNS.  It may take a few days for the errors to clear out but they should after dns registers the correct ip addresses.


If you look in dns now you probably have multiple machine names listed with the same IP
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
FTP server windows 2008 5 56
Want Win 10 Pro to search like Server 2010 or 2012 27 105
Migrating Roaming Profiles to new server 5 44
Event ID 29 KDC Win 2008 R2 DC 6 16
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question