some error log!!!!???

265 pts.
Tags:
Networking
Security
Hi, I don't know the cause of these errors!!?? Are they serious!!!! Thank you. ----- Regards Mahnaz ------------ Event Type: Error Event Source: Kerberos Event Category: None Event ID: 4 Date: 2007/05/02 Time: 12:11:18 ?.? User: N/A Computer: COMPUTER-90 Description: The kerberos client received a KRB_AP_ERR_MODIFIED error from the server COMPUTER-100$. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (domainname), and the client realm. Please contact your system administrator. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. -------------------------- Event Type: Warning Event Source: Tcpip Event Category: None Event ID: 4226 Date: 2007/05/01 Time: 09:47:51 ?.? User: N/A Computer: COMPUTER-90 Description: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00 00 00 00 01 00 54 00 ......T. 0008: 00 00 00 00 82 10 00 80 ....?..? 0010: 01 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ --------------------- Event Type: Warning Event Source: LSASRV Event Category: SPNEGO (Negotiator) Event ID: 40961 Date: 2007/05/01 Time: 09:05:41 ?.? User: N/A Computer: COMPUTER-90 Description: The Security System could not establish a secured connection with the server ldap/domainname. No authentication protocol was available. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ----------------------------

Answer Wiki

Thanks. We'll let you know when a new response is added.

First off, have you followed up on the suggestions/observations in the error messages?

Reference to duplicate named machines for example, and clicking on the link to microsoft (which will pass them the data in the error message. Some of these can be quite helpful.

Other things I’ve seen which can cause this sort of thing are where on of the machines has been either turned off for a few weeks, or has just been restored from an older backup image.

Related to this is that there is an encrypted password between machines in a domain (NT4 onward) which is changed automatically every so often. If it gets out of sync with the domain controller, then it will be considered invalid.

Hope that helps,

Bob

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Magkit
    A good source for event logs is eventid. net
    0 pointsBadges:
    report
  • Magkit
    A good source for event logs is eventid. net
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following