Re: 0x7 (KRB_ERR_S_PRINCIPAL_UNKNOWN) "Server not found in Kerberos database"

Hi Meinolf

Here are the 2 event log entries for the error codes I am seeing -

A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 11:18:8.0000 2/3/2008 Z
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error:
Client Realm:
Client Name:
Server Realm: SH.COM
Server Name: V-SHAD2.sh.com
Target Name: V-SHAD2.sh.com@xxxxxx
Error Text:
File: 9
Line: ae0
Error Data is in record data.

A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 11:12:29.0000 2/3/2008 Z
Error Code: 0xd KDC_ERR_BADOPTION
Extended Error: 0xc00000bb KLIN(0)
Client Realm:
Client Name:
Server Realm: SH.COM
Server Name: host/v-ws-sql1.sh.com
Target Name: host/v-ws-sql1.sh.com@xxxxxx
Error Text:
File: 9
Line: ae0
Error Data is in record data.

The server which is logging these 2 entries is a SQL2005 SP 2 running
Windows 2003 Ent SP2.

We have 5 domain controllers in 2 sites. 3 in our HQ and 2 in our DR - All
Windows 2003 Ent SP2.

This is the only server logging these types of Kerberos errors. There are no
reported errors in the event logs on our domain controllers.

Kerberos logging in turned off on the SQL box. I am seeing the logging of
this entry a lot throughout the day. I have referenced this doc from TechNet
which states the Server is not found in the Kerberos database. Where is this
database and how can I check it's integrity?

http://technet2.microsoft.com/windowsserver/en/library/b36b8071-3cc5-46fa-be13-280aa43f2fd21033.mspx?mfr=true

I look forward to seeing you opinion


Thanks

Oli


"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb66836c98ca33c5088ab550@xxxxxxxxxxxxxxxxxxxxxxx
Hello Oli,

Please psot the complete entry from the event viewer and give some info
about the setup of your network. How many DC's, which Operating system
etc.?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hi,

I am seeing this error message in event viewer and cannot get to the
bottom of this.

I've looked on the net but theres no resolution - can any one help?

I have 2 errors -

0x7 (KRB_ERR_S_PRINCIPAL_UNKNOWN) "Server not found in Kerberos
database" 0xd (KDC_ERR_BADOPTION) "KDC cannot accommodate requested
option."

Which kinds of makes sense. If the server isn;t in kerberos Db then it
cannot accomdate the requested option.

How can I check the kerberos database to make sure the server in
question is
valid. And is the kerberos databse held on my domain controllers?
I'm a little lost!
Any help would be appreciated

Thanks
Oli




.

Relevant Pages

  • Re: Cannot telnet some ports
    ... Some with remote administration feature I believe. ... POP3 Server 110 ... # Network services, Internet style ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Cannot telnet some ports
    ... Some with remote administration feature I believe. ... >> From a Windows 2003 Server SP2 ... >> fromn the 2k3 serrver but can telnet into any other port. ... kerberos 750/udp kdc # Kerberos udp ...
    (microsoft.public.windows.server.general)
  • Re: Kerberos logon to Terminal Server prevents folder redirection
    ... Pass-through refers to the client browser passing through credentials to the Web Interface server; so you can still use Pass-through without enabling the option "Use Kerberos authentication to connect to servers". ...
    (microsoft.public.windows.server.security)
  • RE: Authentication Issue
    ... The kerberos client received a KRB_AP_ERR_MODIFIED error from the server ... > authentication issues, ... I get error messages in the Event Log ...
    (microsoft.public.security)
  • RE: Event ID 40960 and 40961
    ... Thank you for posting to Microsoft newsgroup. ... if a XP/2003 machine is pointed directly at a DNS server that doesn't ... support Kerberos, secure dynamic updates will generate 40960/40961 events. ... XP/2003 machine is pointed to a 2000/2003 DNS server, ...
    (microsoft.public.windows.server.migration)