Re: [ActiveDir] Lsasrv error

[Tom Kern]

Time is correct on both DC's.

 

I don't think I should reset the password on a DC?

That seems a little drastic...

 

 

Thanks

 

On 4/24/06, Active Directory <[EMAIL PROTECTED]> wrote:

Try resetting the machine account password using NETDOM it must be run from the local machine can't be done remotely.

 

Make sure your date / time are correct on both servers. Looks like PDCFSMO is not set to the correct date. This causes issues with Kerb authentication.

 

HTH,

Rick T. Dale
Network Administrator
Phone 417.831.4398
Toll Free 866.508.AGCU
Fax 417.831.5454

CONFIDENTIALITY NOTICE:

The information contained in this message, and in any attached files, may constitute confidential information which belongs only to the person to whom it is addressed. This information is intended only for the use of the individual or entity in which it was sent. If you are not the intended recipient of this information, you are hereby notified that any disclosure, copying, distribution, or taking of any action in reliance on this information is strictly prohibited. If you have received this email in error, please immediately notify us at the number listed above and permanently delete this message.

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Monday, April 24, 2006 10:01 AM
To: activedirectory
Subject: [ActiveDir] Lsasrv error

 

I keep getting this error logged in the system log of my PDC FSMO-

The source server casuing the issue is another DC in the same domain(Win2k3 FFL)

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date:  10/28/2005
Time:  11:04:18 PM
User:  N/A
Computer: PDCFSMO
Description:
The Security System detected an authentication error for the server cifs/myDC.mydomain.com.  The failure code from authentication protocol Kerberos was "{Operation Failed}
The requested operation was unsuccessful.
 (0xc0000001)".

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 01 00 00 c0               ...À   

 

 

 

This is the error logged on the offending DC-

 

Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date:  4/11/2006
Time:  11:04:19 PM
User:  N/A
Computer: MYdc
Description:
The Security System detected an authentication error for the server cifs/PDCFSMO.mydomain.com.

 The failure code from authentication protocol Kerberos was "The attempted logon is invalid.

This is either due to a bad username or authentication information.
 (0xc000006d)".

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp .
Data:
0000: 6d 00 00 c0               m..À   

 

 

I checked Eventid but nothing really applies.

 

Does anyone know what the issue could be?

 

Thanks