Re: Kerberos Test Failed in Netdiag

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Aimme Lirette MSFT (alirette_at_online.microsoft.com)
Date: 05/14/04 

Date: Thu, 13 May 2004 23:53:19 -0500

There are some problems with the newer versions of netdiag incorrectly
reporting this.

Try using kerbray to make sure the kerberos ticket does exist for the
machine- if it does you can safely ignore the error in netdiag. If not
verify the date and time of the machine that this error is coming from and
ensure it is synced with the domain time server. 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Mike Calwell" <anonymous@discussions.microsoft.com> wrote in message
news:3220F391-A67E-46A4-802A-3167688D06CE@microsoft.com...
> I recently created a child domain within my Windows 2003 AD. The first DC
in the child domain was an in-place upgrade of a Windows NT DC. The server
was upgraded to Windows 2000. It does not appear to be replicating properly.
I am getting KCC errors in the Event Viewer (Error Code 1265). Additionally,
the Kerberos Test in NetDiag is failing:
>
> [FATAL] Kerberos does not have a ticket for
krbtgt/child_domain.parent_domain.com
>
> [FATAL]  Kerberos does not have a ticket for DC1$
>
> My thought is the Kerberos Tickets need to be recreated. Has anyone else
seen this? Can you point me to some Q Documents?
>
> Thanks,
> Mike Calwell

Relevant Pages

  • Re: NetDiag & Kerberos error
    ... This is a known bug in 2003 version of Netdiag. ... You can ignore that kerberos ... The domain is Windows 2000, ... I rebuilt the new Exchange server ...
    (microsoft.public.exchange.setup)
  • Re: UDP and fragmentation
    ... and group membership, some accounts will have larger Kerberos ... Kerberos ticket which includes the set of groups you are a member of. ...
    (comp.protocols.kerberos)
  • Re: WSE 2 and impersonation
    ... If you are looking to create an interoperable web service, ... For our particular solution, Kerberos is ... >> a Kerberos ticket that allows the Web service consumer (running on ... >> When the message is received by WSE, ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Kerberos
    ... What is the impact if a client cannot get a kerberos ticket from the TGT? ... Whay would netdiag report that Kerberos test failed when a client does ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problems with OpenSSH and MS domain controller (using Kerberos)
    ... The support of gssapi for ssh is outline in a RFC draft ... this case kerberos ticket), then one used existing token to authenticate ... For openssh client to ...
    (comp.security.ssh)