[19454] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Event ID 7 in Windows 2000 Server Event-Log

daemon@ATHENA.MIT.EDU (Karl Pitrich)
Fri Jun 20 10:00:40 2003

From: Karl Pitrich <karl.pitrich@fabasoft.com>
To: "Holderfield, Jason" <jholderfield@ritaohio.com>
In-Reply-To: <0B35D587A983D5119D0C0002B31F0302ACB8A3@brec010502mail.rita.ritaoh.net>
Message-Id: <1056117563.3077.29.camel@warp.fabafsc.fabagl.fabasoft.com>
Mime-Version: 1.0
Date: 20 Jun 2003 15:59:23 +0200
cc: "'kerberos@mit.edu'" <kerberos@mit.edu>
Content-Type: multipart/mixed; boundary="===============50668404620256391=="
Errors-To: kerberos-bounces@mit.edu


--===============50668404620256391==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="=-E+EhhCqnnzF0x1F9fKuX"


--=-E+EhhCqnnzF0x1F9fKuX
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Fri, 2003-06-20 at 15:39, Holderfield, Jason wrote:
> I have received the error below on one of my domain controllers. Wonderin=
g
> if any resolution has been found. Microsoft has no information:
>=20
> Event Type:	Error
> Event Source:	KDC
> Event Category:	None
> Event ID:	7
> Date:		6/18/2003
> Time:		4:53:25 PM
> User:		N/A
> Computer:=09
> Description:
> The Security Account Manager failed a KDC request in an unexpected way. T=
he
> error is in the data field. The account name was =E2=AD=84=EE=91=B4=E7=AB=
=87=E4=93=B9=E7=B2=A5=E7=90=9E=EF=98=B0=E6=95=97=D9=90=DF=95=E5=B4=A8=DF=95
> lookup type 0x100.

i had this error too some weeks ago...

i _think_ this is a locked out domain user trying to log in and the KDC ref=
uses initial credentials.

another possibility is that someone tries principal user@FOO where the Wind=
ows2000 domain
ist FOO.COMPANY.COM and the client kinit program cannot set bit 15 (IIRC) t=
o canonicalize the
realm name.

/ karl

--=-E+EhhCqnnzF0x1F9fKuX
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQA+8xM7hjEylB2OKukRAk+YAKCON807jKUM2T030ahtjVaCUCm4oQCeOdUG
F8HAcPDTk8FbhPmvJqP0NXA=
=E2ml
-----END PGP SIGNATURE-----

--=-E+EhhCqnnzF0x1F9fKuX--


--===============50668404620256391==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============50668404620256391==--


home help back first fref pref prev next nref lref last post