Kerberos Event ID 594 in system log

[Rob Z.]

What would cause this? Cut&pasted from my DC server:
----------------------------------------------------
A Kerberos Error Message was received:
on logon session InitializeSecurityContext
Client Time:
Server Time:
Error Code: 20:28:23.0000 8/26/2004 (null) 0x20
Extended Error: KRB_AP_ERR_TKT_EXPIRED
Client Realm:
Client Name:
Server Realm: my_domain.COM
Server Name: krbtgt/my_domain.COM
Target Name: krbtgt/my_domain.COM@my_domain.COM
Error Text:
File:
Line:
Error Data is in record data.

 

[Microsoft]

This might be expected if, for example, you have a Windows 2000 Server from
another Domain, with no trust relationship or parent/child relationship,
which has tried to utilize a transitive trust to authenticate to the Windows
2000 DC where you received this error. It would have tried to forward a TGT
from cache, and obviously this ticket was not generated by a Security
Principal which the proposed authentication server would recognize. This may
also be as simple as a mistyped user name or re-named Workstation/Server
within your DC Domain".

Check the MIT Kerberos V5 Systems Administrator's Guide for information
regarding your particular error code.


www.helpline4it.com
The Best IT Community Portal!
www.helpline4it.com