Re: lots of kerberos errors on DC

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Matt Hickman (hemo_jr_at_space.com)
Date: 04/11/04 

Date: 10 Apr 2004 20:00:16 -0700

"wes" <ms@myf.org> wrote in message news:<1b1de01c41f28$af20ece0$a101280a@phx.gbl>...
>
> A Kerberos Error Message was received:
> on logon session
> Client Time:
> Server Time: 7:33:25.0000 4/9/2004 Z
> Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
> Extended Error:
> Client Realm:
> Client Name:
> Server Realm: MYDOMAIN.ORG
> Server Name: ldap/172.16.52.5
> Target Name: ldap/172.16.52.5@MYDOMAIN.ORG
> Error Text:
> File: 9
> Line: ab8
> Error Data is in record data.

It is saying that the server principal name cannot be found in the
AD database. If you have a server that is not at least Windows 2000,
this is normal, because it can't authenticate with Kerberos anyway.

You may want to check your servers to ensure that they are all members
of the domain and in AD. 

-- 
Matt Hickman 
        Neither of them had much confidence in the skill and knowledge 
        of their elders; along with their great natural talent for mechanics 
        and their general brilliance went a cocksure, half-baked conceit
        which led them to think that they knew a great deal more
        than they did.
              - Robert A. Heinlein  _The Rolling Stones_ c1952
Quantcast