Kerberos Problem; UDP Packet Loss

[Richard Moreno]

Hi-

Has anyone come across the following event log?

EVENT ID: 10
SOURCE: Kerberos
Description:
The kerberos subsystem is having problems fetching tickets from your domain
contoller using the UDP network protocol. This is typically due to network
problems. Please contact your systems administrator.

This is the 1st time I've encountered this issue. Suffice it to say, DNS
configuration is good, site topology is covered. I want to say that this is
a complete communications problem of the network hardware (routers,
switches, WAN) because I've scoured my AD Infrastructure and configuration.

One major issue that stems from this (randomly) is that once a user enters
their logon credentials the ctrl-alt-del window sits there for a few minutes
and eventually moves to the "loading personal settings" progress bar. It
takes 40 minutes for the desktop to come up and even then there's no access
to network resources because the client never actually got authenticated.

Comments?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Richard McCall [MSFT]]

Based on the error and problems you are seeing try the setting in this
article.
244474 How to Force Kerberos to Use TCP Instead of UDP
http://support.microsoft.com/?id=244474

 

[Richard Moreno]

Hi-

Thank you. I did find this article previously and have used it sparingly
however in your opinion is this all there is? I'm looking for a root cause
if I can find one. And what is the result of network usage in shifting all
Kerberos traffic to talk over TCP rather than it's standard UDP?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

This posting is provided "AS IS" with no warranties, and confers no
rights.

Based on the error and problems you are seeing try the setting in this
article.
244474 How to Force Kerberos to Use TCP Instead of UDP
http://support.microsoft.com/?id=244474


--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."

Hi-

Has anyone come across the following event log?

EVENT ID: 10
SOURCE: Kerberos
Description:
The kerberos subsystem is having problems fetching tickets from your domain
contoller using the UDP network protocol. This is typically due to network
problems. Please contact your systems administrator.

This is the 1st time I've encountered this issue. Suffice it to say, DNS
configuration is good, site topology is covered. I want to say that this is
a complete communications problem of the network hardware (routers,
switches, WAN) because I've scoured my AD Infrastructure and configuration.

One major issue that stems from this (randomly) is that once a user enters
their logon credentials the ctrl-alt-del window sits there for a few minutes
and eventually moves to the "loading personal settings" progress bar. It
takes 40 minutes for the desktop to come up and even then there's no access
to network resources because the client never actually got authenticated.

Comments?

--
Thanks,
Richard Moreno
MCSE NT4\2000, MCSA 2000

This posting is provided "AS IS" with no warranties, and confers no
rights.