Re: Event ID 3 Kerberos KDC_ERR_S_PRINCICAL_UNKNOWN



From what it appears, a client is making a request for a ticket for a
service that Kerberos doesn't know about.

You can enable tracing on Kerberos to see if you can determine what is going
on:
http://support.microsoft.com/?id=262177

You can also look at tickets currently used on your client with a Windows
Resource Kit executable named KerbTray.exe.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Giles Ogram" <Giles Ogram@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:07BD04DA-F971-4F32-B773-248F05A807E1@xxxxxxxxxxxxxxxx
Hello,
I am getting a load of these errors along with KDC_ERR_BADOPTION messages
as
well.
We get users having very slow logons.

05/03/2007 12:33:36 Kerberos Error None 3 N/A DCAADC001 "A Kerberos Error
Message was received:
on logon session
Client Time:
Server Time: 12:33:36.0000 3/5/2007 Z
Error Code: 0xd KDC_ERR_BADOPTION
Extended Error: 0xc00000bb KLIN(0)
Client Realm:
Client Name:
Server Realm: domain.com
Server Name: host/dc1.domain.com
Target Name: host/dc1.domain.com@xxxxxxxxxx
Error Text:
File: 9
Line: ae0
Error Data is in record data."

05/03/2007 12:29:00 Kerberos Error None 3 N/A DCAADC001 "A Kerberos Error
Message was received:
on logon session
Client Time:
Server Time: 12:29:0.0000 3/5/2007 Z
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error:
Client Realm:
Client Name:
Server Realm: domain.com
Server Name: cifs/127.0.0.1
Target Name: cifs/127.0.0.1@xxxxxxxxxx
Error Text:
File: 9
Line: ae0
Error Data is in record data."

Regards
Giles Ogram


.



Relevant Pages

  • Kerberos Issues
    ... The function InitializeSecurityContext received a Kerberos ... Client Realm: ... Server Realm: SPHS.COM ... Error Data is in record data. ...
    (microsoft.public.win2000.security)
  • Re: Kerberos
    ... Event Source: Kerberos ... A Kerberos Error Message was received: ... Server Realm: xxxxxxxx ... Error Data is in record data. ...
    (microsoft.public.exchange.admin)
  • Kerberos Errors
    ... switched Kerberos login on and get the following error - has ... Client Realm: ... Server Realm: GDMCKEE.HOME ... Error Data is in record data. ...
    (microsoft.public.windows.server.general)
  • Re: Security Log Event
    ... I enabled Kerberos logging and recieved this error ... Client Realm: ... Server Realm: BRIGIDCOLLINS.LOCAL ... Error Data is in record data. ...
    (microsoft.public.windows.server.sbs)
  • Re: Kerberos Errors - Windows 2003 Domain
    ... MCSE, MVP Directory Services ... use kerbtray to check for errors and scoured the net looking for ... Server Realm: MYDOMAIN.COM ... Error Data is in record data. ...
    (microsoft.public.windows.server.active_directory)