Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Event ID3 KRB_AP_ERR_MODIFIED No duplicate SPN's

$
0
0

A customers server with Windows Server 2003 Standard Edition SP2 recieves Kerberos warnings up to twice a minute.

Date: 2013-02-22     Source: Kerberos

Time: 08:31:26          Category: None

Type: Error                 Event ID: 3

User: N/A

Computer: FREJA

Server Time: 7:38:26.0000 2/22/2013 Z
 Error Code: 0x29 KRB_AP_ERR_MODIFIED
 Extended Error:
 Client Realm:
 Client Name:
 Server Realm: HOLKEN.INT
 Server Name: host/loke.holken.int
 Target Name:
 Error Text:
 File: 3
 Line: 4bc
 Error Data is in record data.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I have searched the net and tested lots of things but nothing have worked for me. What I've tested:
· Looked for duplicate SPN's using Setspn.exe -X which returned no duplicates.
· Tripple checked DNS-entries for both names and IP-addresses.
· Delegation on the machine this error originates from.
· Used Network Monitor  (though I'm not pretty good at it) filtering out kerberos-traffic and I couldn't find any errors there, the same time as the event was logged.

Any ideas?


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>