LSASRV / DNS question

[Steve Grosz]

Ever since I had to rebuild my DNS machine, I have been getting this
info in my error logs.

Can anyone point me in a direction to stop this from coming up all the time?

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 5/3/2005
Time: 7:25:46 PM
User: N/A
Computer: WEB2
Description:
The Security System detected an authentication error for the server
DNS/ns1.fiberpipe.com. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to service
the logon request.
(0xc000005e)".


Thanks,
Steve

 

[Kevin D. Goodknecht Sr. [MVP]]

Ever since I had to rebuild my DNS machine, I have been getting this
info in my error logs.

Can anyone point me in a direction to stop this from coming up all
the time?

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 5/3/2005
Time: 7:25:46 PM
User: N/A
Computer: WEB2
Description:
The Security System detected an authentication error for the server
DNS/ns1.fiberpipe.com. The failure code from authentication protocol
Kerberos was "There are currently no logon servers available to
service

SInce the DNS server is a Public DNS, the usual cause is your ISP's DNS in
TCP/IP Properties and/or you have a public IP on your interface and you have
"register this connection's addresses in DNS".

If you have your ISP's DNS in TCP/IP properties, it could be trying to
register in the forward lookup zone on that DNS.
If you have a Public IP on the interface it could be trying to register a
PTR in that DNS.
An ipconfig /all with tell me the story.

 

[Steve Grosz]

Here is the ipconfig:



Windows IP Configuration



Host Name . . . . . . . . . . . . : WEB2
Primary Dns Suffix . . . . . . . : computicle.com
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : computicle.com

Ethernet adapter Internal:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet Adapter
Physical Address. . . . . . . . . : 00-11-5B-65-2C-AA
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.253
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 209.161.4.74
209.161.4.76



Ethernet adapter External:

Connection-specific DNS Suffix . : computicle.com

Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI TX
NIC (3C905B-TX)
Physical Address. . . . . . . . . : 00-50-DA-B8-49-BA
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 209.161.4.76
Subnet Mask . . . . . . . . . . . : 255.255.255.248
IP Address. . . . . . . . . . . . : 209.161.4.74
Subnet Mask . . . . . . . . . . . : 255.255.255.248
Default Gateway . . . . . . . . . : 209.161.4.73
DNS Servers . . . . . . . . . . . : 209.161.4.74

 

[Kevin D. Goodknecht Sr. [MVP]]

Here is the ipconfig:



Windows IP Configuration



Host Name . . . . . . . . . . . . : WEB2
Primary Dns Suffix . . . . . . . : computicle.com
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : computicle.com

Ethernet adapter Internal:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet
Adapter Physical Address. . . . . . . . . : 00-11-5B-65-2C-AA
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.253
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 209.161.4.74
209.161.4.76



Ethernet adapter External:

Connection-specific DNS Suffix . : computicle.com

Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI
TX NIC (3C905B-TX)
Physical Address. . . . . . . . . : 00-50-DA-B8-49-BA
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 209.161.4.76
Subnet Mask . . . . . . . . . . . : 255.255.255.248
IP Address. . . . . . . . . . . . : 209.161.4.74
Subnet Mask . . . . . . . . . . . : 255.255.255.248
Default Gateway . . . . . . . . . : 209.161.4.73
DNS Servers . . . . . . . . . . . : 209.161.4.74

Is this Acitve Directory and is this a domain controller?
If it is, I wouldn't be surprised if you didn't have a lot more errors than
this.

The original error is caused because your DNS server is not authoritative
for the reverse lookup for your IP addresses.
QUESTION SECTION:
74.4.161.209.in-addr.arpa. IN SOA

AUTHORITY SECTION:
4.161.209.in-addr.arpa. 86400 IN SOA ns1.fiberpipe.com.

QUESTION SECTION:
76.4.161.209.in-addr.arpa. IN SOA

AUTHORITY SECTION:
4.161.209.in-addr.arpa. 86400 IN SOA ns1.fiberpipe.com.

 

[Steve Grosz]

It is not a AD system, just a simple DNS system

Is this Acitve Directory and is this a domain controller?
If it is, I wouldn't be surprised if you didn't have a lot more errors than
this.

The original error is caused because your DNS server is not authoritative
for the reverse lookup for your IP addresses.
QUESTION SECTION:
74.4.161.209.in-addr.arpa. IN SOA

AUTHORITY SECTION:
4.161.209.in-addr.arpa. 86400 IN SOA ns1.fiberpipe.com.

QUESTION SECTION:
76.4.161.209.in-addr.arpa. IN SOA

AUTHORITY SECTION:
4.161.209.in-addr.arpa. 86400 IN SOA ns1.fiberpipe.com.

 

[Steve Grosz]

Plus, I don't have any reverse lookups defined within DNS.....

 

[Kevin D. Goodknecht Sr. [MVP]]

Plus, I don't have any reverse lookups defined within DNS.....

Unless your ISP delegates the reverse lookup to you, you wouldn't want a
reverse lookup, either.
Uncheck "Register this connection's addresses in DNS" should stop it from
trying to register in DNS.

 

[Steve Grosz]

I guess I'm just not seeing that option......

Unless your ISP delegates the reverse lookup to you, you wouldn't want a
reverse lookup, either.
Uncheck "Register this connection's addresses in DNS" should stop it from
trying to register in DNS.

 

[Kevin D. Goodknecht Sr. [MVP]]

I guess I'm just not seeing that option......

On the DNS tab of TCP/IP properties.