List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] [FATAL] Kerberos does not have a ticket for HOST

Prev Next

You are not authorized to post a reply.

Author

Messages

AD00000173 User is Offline

Posts:0

12/30/2005 6:11 AM
My Question for the List: I have forced TCP on a test server and so far it hasn't failed, but since I am not seeing fragmentation with the ping test in the first place, could it be something else and is forcing TCP not really going to fix my problem here? TIA Regards

amulnick

Posts:163

12/30/2005 6:33 AM
2003 AD domain with a mix of 2k and 2k3 member servers. Having an issue where Kerberos host tickets don't look to be renewing on random member servers. Server: host/xxx.yyy.com End Time: 12/30/2005 1:06:51 Renew Time: 1/5/2006 15:06:51 [FATAL] Kerberos does not have a ticket for xxx$. The problem server(s) don't contain host tickets for short nor FQDN. Klist and kerbtray also don't show the host ticket as well, so I have ruled out the chance of the netdiag bug. A reboot of the member server or "setspn -R host" will usually fix the problem temporarily. Also, seeing netlogon 5719's and this looks to be causing authentication problems within the domain. Suspect Kerberos fragmentation and considered forcing TCP instead of UDP. But I am not seeing any signs of fragmentation by using " PING -l " with values well over 1472. My Question for the List: I have forced TCP on a test server and so far it hasn't failed, but since I am not seeing fragmentation with the ping test in the first place, could it be something else and is forcing TCP not really going to fix my problem here? TIA Regards

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] [FATAL] Kerberos does not have a ticket for HOST

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads