[FATAL] Kerberos does not have a ticket for host

[Jack Seredyniecki]

I get this error when running NETDIAG on a Windows Server 2003 in a Win 2000
domain. How do I fix it?

 

[Guest]

I am not seeing any loss of connectivity, and I am getting the same thing. I installed Kerbtray and it shows I have several tickets. I turned on logging of Kerberos events, and I am getting the following

Event Type: Erro
Event Source: Kerbero
Event Category: Non
Event ID:
Date: 11/26/200
Time: 9:21:30 A
User: N/
Computer: LUN
Description
A Kerberos Error Message was received
on logon session
Client Time:
Server Time: 14:21:30.0000 11/26/2003
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOW
Extended Error:
Client Realm:
Client Name:
Server Realm: MYDOMAIN.CO
Server Name: krbtgt/MYDOMAIN.CO
Target Name: cifs/[email protected]
Error Text:
File:
Line: ab
Error Data is in record data

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp

----------------------------------------------------------------------------------------

Event Type: Erro
Event Source: Kerbero
Event Category: Non
Event ID:
Date: 11/26/200
Time: 9:21:30 A
User: N/
Computer: LUN
Description
A Kerberos Error Message was received
on logon session
Client Time:
Server Time: 14:21:30.0000 11/26/2003
Error Code: 0xe KDC_ERR_ETYPE_NOTSUP
Extended Error:
Client Realm:
Client Name:
Server Realm: MYDOMAIN.CO
Server Name: krbtgt/MYDOMAIN.CO
Target Name: host/[email protected]
Error Text:
File:
Line: ab
Error Data is in record data

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp

----------------------------------------------------------------------------------------

Event Type: Erro
Event Source: Kerbero
Event Category: Non
Event ID:
Date: 11/26/200
Time: 9:34:03 A
User: N/
Computer: LUN
Description
A Kerberos Error Message was received
on logon session
Client Time:
Server Time: 14:34:3.0000 11/26/2003
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOW
Extended Error:
Client Realm:
Client Name:
Server Realm: MYDOMAIN.CO
Server Name: krbtgt/MYDOMAIN.CO
Target Name: ldap/[email protected]
Error Text:
File:
Line: ab
Error Data is in record data

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp

----------------------------------------------------------------------------------------

Event Type: Erro
Event Source: Kerbero
Event Category: Non
Event ID:
Date: 11/26/200
Time: 9:34:03 A
User: N/
Computer: LUN
Description
A Kerberos Error Message was received
on logon session
Client Time:
Server Time: 14:34:3.0000 11/26/2003
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOW
Extended Error:
Client Realm:
Client Name:
Server Realm: MYDOMAIN.CO
Server Name: krbtgt/MYDOMAIN.CO
Target Name: ldap/[email protected]
Error Text:
File:
Line: ab
Error Data is in record data

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp

----------------------------------------------------------------------------------------

I have two tickets for one of my domain controllers, SERVER$ and LDAP/SERVER.mydomain.com/[email protected], and the error showed the ip address instead of the server name for an LDAP ticket. If this is a non-issue as it appears to be, I hope someone updates the Exchange 2003 Deployment guide, because I think I just wasted a day trying to figure this out




----- mmcgough [MSFT] wrote: ----

If you are not seeing any loss of connectivity or
anything like that it is a bug. There is a problem with
netdiag reporting this and it is not accurate. The first
thing to do is to install the resource kit and use klist
or kerbtray to see if you really are getting the ticket
or not.

If you really are not getting the ticket, then stop the
kdc service (key distribution center) Then set it to
manual
Reboot the machine.
Reset the secure channe
reboot again.
Start the kdc and set to automatic. That should force
you to get a good ticket from another machine.

Mike