Home All Groups Group Topic Archive Search About
Author
22 Mar 2005 2:11 AM
GreenThumb
Hello All-

I am receiving this error on my test server.  I don't know how to fix it.  I
am not getting this on any of my other servers, including the DC.

Event Type:    Error
Event Source:    Kerberos
Event Category:    None
Event ID:    4
Date:        3/21/2005
Time:        5:41:25 PM
User:        N/A
Computer:    ORCRASV008
Description:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
ORSLSNB004$.  The target name used was cifs/XXXXX.XXXXX.XXXX. This indicates
that the password used to encrypt the kerberos service ticket is different
than that on the target server. Commonly, this is due to identically named 
machine accounts in the target realm (XXXXXXXXX), and the client realm.  
Please contact your system administrator.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Author
23 Mar 2005 10:53 PM
Tony Marziano
Its possible that
• Two computers in different domains have the same name and the client sent
the authentication data to the wrong computer.

Resolution

Verify that there are not multiple computers with the same name, including
NetBIOS names, anywhere on the network.

Heres additional troubleshooting suggestions. Note that the error message
you're getting is included: http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx#ECAA

Hope this helps.

Show quoteHide quote
"GreenThumb" wrote:

> Hello All-
>
> I am receiving this error on my test server.  I don't know how to fix it.  I
> am not getting this on any of my other servers, including the DC.
>
> Event Type:    Error
> Event Source:    Kerberos
> Event Category:    None
> Event ID:    4
> Date:        3/21/2005
> Time:        5:41:25 PM
> User:        N/A
> Computer:    ORCRASV008
> Description:
> The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
> ORSLSNB004$.  The target name used was cifs/XXXXX.XXXXX.XXXX. This indicates
> that the password used to encrypt the kerberos service ticket is different
> than that on the target server. Commonly, this is due to identically named 
> machine accounts in the target realm (XXXXXXXXX), and the client realm.  
> Please contact your system administrator.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>

Bookmark and Share