Kerberos Event ID 4

[Jeff]

I have a 2000 server with ISA installed. It acts as our
firewall and proxy. It also has a company Intranet on it.
Our internal network has a 2000 DNS server. Our companies
internal domain name is PAI. There is another company out
in the world with the internet domain name of pai.com. My
event log on the 2000 server with isa creates 4 events
every 30 seconds or so with the below event message

The function InitializeSecurityContext received a Kerberos
Error Message:
on logon session
Client Time:
Server Time: 14:37:7.0000 1/6/2004 (null)
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Client Realm:
Client Name:
Server Realm: PAI.COM
Server Name: krbtgt/PAI.COM
Target Name: DNS/[email protected]
Error Text:
File:
Line:
Error Data is in record data.

Sometimes the target name is differant, but I think it is
still our isp's dns servers. My thought on this is that
something is escaping my network and trying to
authenticate to this external PAI.com domain since my
internal domain name is pai.com. The problem is I don't
know where to look for this problem. Should I look in our
dns, should I put in some type of filter, etc...

Any suggestions?

Thanks,

 

[g]

Hi i am getting the same error but event id 594.
So is a few other people, all with iis and ad. My error happens to be on a
iis/ap/db server. No fix so far. Broken patch? Mine started within the
last couple of weeks.

 

[Curtis Clay III [MSFT]]

Hello Jeff,
The article below states that this error occurs when the server/account
being requested is not within the AD database.

230476 Description of Common Kerberos-Related Errors in Windows 2000
http://support.microsoft.com/?id=230476

Your assumption that it is your ISP is quite probable.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Greg Wilkerson]

Curtis,

This article is all fine and dandy, but how is the error
prevented/corrected?

Thanks in advance,

Greg