Re: KDC error suggestions?



Hi Crina

I have followed the steps in the Microsoft Article that you referred to.
Here are the results that I received from using "Method 1" in the article:

ldap_search_s(ld, "DC=mydomain,DC=com", 2,
"serviceprincipalname=MSSQLSvc/SBSERVER.mydomain.local", attrList, 0, &msg)
Error: Search: Referral. <10>
Server error: 0000202B: RefErr: DSID-031006E0, data 0, 1 access points
ref 1: 'mydomain.com'

Result <10>: 0000202B: RefErr: DSID-031006E0, data 0, 1 access points
ref 1: 'mydomain.com'

Matched DNs:
Getting 0 entries:

I'm not sure what I am looking at a far as the results go or if I'm even
getting through the search correctly for that matter! One question I have is
when I'm on Step 5 when it says click connection and then click Bind I'm
seeing a screen that has Username: mydomain, Password: it's blank and
Domain:mydomain. The instructions say to use the default settings. Do I not
type a password in there. When not putting a password in it says that the
bind failed because of invalid credentuals.

Thanks
Jeff


"Crina Li (MSFT)" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:M45Eq$DgFHA.1336@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Jeff,
>
> Thank you for posting in SBS newsgroup.
>
> Based on my research, this behavior may be caused by there are two or more
> computer accounts that have the same service principal names (SPNs)
> registered.
>
> To resolve the issue, we need to locate the machine accounts that have the
> duplicate SPNs. To do so, please refer to the following KB article:
>
> 321044 Event ID 11 in the system log of domain controllers
> http://support.microsoft.com/?id=321044
>
> 216498 How to remove data in Active Directory after an unsuccessful domain
> http://support.microsoft.com/?id=216498
>
> 250455 How to Change Display Names of Active Directory Users
> http://support.microsoft.com/?id=250455
>
> In addition, the following KB for your reference:
>
> 237677 Using LDIFDE to Import and Export Directory Objects to Active
> Directory
> http://support.microsoft.com/?id=237677
>
> 273863 How to Change the LegacyExchangeDN Attribute in Native Mode with
> ADSI
> http://support.microsoft.com/?id=273863
>
> I hope the above information helps, please try the above steps and let me
> know the result at your earliest convenience. I am looking forward to your
> reply!
>
> Best Regards,
>
> Crinal
> --------------------
> | From: "Jeff Teel" <jdteel@xxxxxxxxxxxx>
> | Subject: KDC error suggestions?
> | Date: Thu, 30 Jun 2005 22:47:12 -0500
> | | Newsgroups: microsoft.public.windows.server.sbs
> | |
> | I have been getting an error message in the event log that reads:
> |
> | Event Type: Error
> | Event Source: KDC
> | Event Category: None
> | Event ID: 11
> | Date: 6/8/2005
> | Time: 4:58:01 PM
> | User: N/A
> | Computer: MYSERVER
> | Description:
> | There are multiple accounts with name
> MSSQLSvc/MYSERVER.domain.local:1433
> of
> | type DS_SERVICE_PRINCIPAL_NAME.
> |
> | For more information, see Help and Support Center at
> | http://go.microsoft.com/fwlink/events.asp.
> |
> | I have Googled the error and done some reading of how others have
> narrowed
> | down the cause of the error but precise instructions seem to evade the
> | posts. I have the Windows Support Tools installed that some have
> mentioned
> | that they used but I am hesitant to use them when I don't know what I'm
> | doing for sure. I am leaning toward the problem being an SQL account
> problem
> | as the error says but I am not sure how to go about using the Microsoft
> | Support Tools to narrow down the problem. Are there any suggestions on
> this
> | error and what I can do to get it resolved?
> |
> | Thanks
> | Jeff
> |
> |
> |
>


.



Relevant Pages

  • Re: Active Directory Value Proposition
    ... > backup purposes - which leads to centralized backups (including open file ... > 1) Central administration of accounts, permissions, and policy. ... > What are the risks? ... >> Would you recommend using Active Directory in a small-business setting? ...
    (microsoft.public.win2000.active_directory)
  • Re: 2000 server and 2000 pro network
    ... I set up accounts from the server using ... these are in a workgroup called CMT. ... but a regular user cannot login using network ... Microsoft Windows MVP - Active Directory ...
    (microsoft.public.win2000.dns)
  • Re: Searching for expired by date accounts in AD
    ... expired passwords but expired by date expired) in Active Directory. ... Dim objShell, lngBiasKey, lngBias, k ... Set objConnection = CreateObject ... ' Filter on expired user accounts. ...
    (microsoft.public.scripting.vbscript)
  • RE: nother confusing question 70-290
    ... Each office has one domain controller. ... > accounts in that office. ... > The Denver OU is accidentally deleted from Active Directory. ...
    (microsoft.public.cert.exam.mcse)