|
it
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
The KDC service hung on starting.I keep getting this in the event log: Event ID:7022 The Kerberos Key Distribution Center service hung on starting. Whenever i restart the server, It's doesn't seem to be causing a problem as if i look at services it tells me the KDC Service is started and people can log just fine. It just pops up an annoying box telling me 'At least one service has failed to start'. This is the only error i get in the system log during startup, i get a couple of crypt32 errors in the application log but i imagine it's unrelated. I've no idea where to start looking, is there a default timeout set on the KDC service so if it doesn't start within say 30 seconds Windows thinks it's hung? I seem to be able to restart the service very quickly. Any suggestions would be appreciated. Thank you Paul Paul:
Run Netdiag (netdiag /test:kerberos /v) and DCdiag and check for Kerberos consistency. If all is well, you can safely ignore this message. -Allen Firouz Show quoteHide quote "Paul Mckenna" wrote: > Hello, > > I keep getting this in the event log: > > Event ID:7022 > The Kerberos Key Distribution Center service hung on starting. > > Whenever i restart the server, It's doesn't seem to be causing a problem as > if i look at services it tells me the KDC Service is started and people can > log just fine. > It just pops up an annoying box telling me 'At least one service has failed > to start'. > > This is the only error i get in the system log during startup, i get a > couple of crypt32 errors in the application log but i imagine it's unrelated. > > I've no idea where to start looking, is there a default timeout set on the > KDC service so if it doesn't start within say 30 seconds Windows thinks it's > hung? > I seem to be able to restart the service very quickly. > > Any suggestions would be appreciated. > > Thank you > Paul > Hi,
Thanks for your response, ran both tests and they passed ok.. But it got me thinking. I Neglected to mention I had recently removed and reinstalled certificate services following the Microsoft article 55151 (or some number like that) :) .. I didn’t think this was relevant as I didn’t know Kerberos used certificate services.. I guess if it’s available it uses it. So anyway, I ran certutil –dcinfo and sure enough Kerberos was using the old certificate. Once I deleted that and reboot it got itself a new certificate and all was well once again. Thanks again for your help it got me on the right track… Show quoteHide quote "Allen Firouz" wrote: > Paul: > > Run Netdiag (netdiag /test:kerberos /v) and DCdiag and check for Kerberos > consistency. If all is well, you can safely ignore this message. > > -Allen Firouz > > "Paul Mckenna" wrote: > > > Hello, > > > > I keep getting this in the event log: > > > > Event ID:7022 > > The Kerberos Key Distribution Center service hung on starting. > > > > Whenever i restart the server, It's doesn't seem to be causing a problem as > > if i look at services it tells me the KDC Service is started and people can > > log just fine. > > It just pops up an annoying box telling me 'At least one service has failed > > to start'. > > > > This is the only error i get in the system log during startup, i get a > > couple of crypt32 errors in the application log but i imagine it's unrelated. > > > > I've no idea where to start looking, is there a default timeout set on the > > KDC service so if it doesn't start within say 30 seconds Windows thinks it's > > hung? > > I seem to be able to restart the service very quickly. > > > > Any suggestions would be appreciated. > > > > Thank you > > Paul > > Hi Paul,
I would like to jump in and provide some points here. Technically speaking, the DC will generate a self-signed certificate only for EFS purpose. It is not directly related to the KDC error. Event ID 7022 is detailed in the following article, as Allen has stated, you can safely ignore it after sucessfully running Dcdiag and netdiag. I believe restarting DC also resulting restart DNS service which has resolved this issue. 315951 "The Net Logon Service Hung on Starting" Is Recorded in the System Even http://support.microsoft.com/?id=315951 hope it helps! Further questions, let's get in touch! Best regards, Rebecca Chen MCSE2000 MCDBA CCNA Microsoft Online Partner Support Get Secure! - www.microsoft.com/security ===================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. Hi guys,
same problem here - The KDC service hung on starting. - but when running dcdiag: Starting test: systemlog An Error Event occured. EventID: 0xC0000007 Time Generated: 05/03/2005 20:28:53 Event String: The Security Account Manager failed a KDC request An Error Event occured. EventID: 0xC0000007 Time Generated: 05/03/2005 20:28:53 Event String: The Security Account Manager failed a KDC request An Error Event occured. EventID: 0xC0000007 Time Generated: 05/03/2005 20:29:00 Event String: The Security Account Manager failed a KDC request An Error Event occured. EventID: 0xC0000007 Time Generated: 05/03/2005 20:29:00 Event String: The Security Account Manager failed a KDC request An Error Event occured. EventID: 0xC0000007 Time Generated: 05/03/2005 20:29:03 Event String: The Security Account Manager failed a KDC request An Error Event occured. EventID: 0xC0000007 Time Generated: 05/03/2005 20:29:03 Event String: The Security Account Manager failed a KDC request An Error Event occured. EventID: 0xC0001B6E Time Generated: 05/03/2005 20:35:00 (Event String could not be retrieved) ......................... PHAMX1 failed test systemlog what could be wrong? Jan  
Other interesting topics
|
|||||||||||||||||||||||
