Kerberos troubleshooting e.g. 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN

[Mark]

Is anyone aware of any general troubleshooting
information for Kerberos errors in Windows 2003?

While troubleshooting another problem I enabled Kerberos
logging and discovered I was getting regular errors (see
below). I fixed the original error (which had a Userenv
1030 error with it), but the other errors are unrelated.

Microsoft tell you how to turn on logging but then don't
give any information (that I have found) on how to read
the event logs that are created.

Can anyone tell me how I might read the following, or
just general Kerberos error analysis?

Type: Error
Log: System
Source: Kerberos
Event: 3

A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 12:17:39.0000 1/27/2004 Z
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Extended Error:
Client Realm:
Client Name:
Server Realm: DOMAIN.LOCAL
Server Name: cifs/domain.local
Target Name: cifs/***@DOMAIN.LOCAL
Error Text:
File: 9
Line: ab8
Error Data is in record data.

[Laura A. Robinson [MVP]]

Post by Mark
Is anyone aware of any general troubleshooting
information for Kerberos errors in Windows 2003?
While troubleshooting another problem I enabled Kerberos
logging and discovered I was getting regular errors (see
below). I fixed the original error (which had a Userenv
1030 error with it), but the other errors are unrelated.
Microsoft tell you how to turn on logging but then don't
give any information (that I have found) on how to read
the event logs that are created.
Can anyone tell me how I might read the following, or
just general Kerberos error analysis?
Type: Error
Log: System
Source: Kerberos
Event: 3
on logon session
Server Time: 12:17:39.0000 1/27/2004 Z
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Server Realm: DOMAIN.LOCAL
Server Name: cifs/domain.local
File: 9
Line: ab8
Error Data is in record data.

Do you have a server with this name in your environment?

Laura

[Mark]

There are no server names in that error message that I
can see. I have replaced the name of my domain
with "domain", otherwise the error message is as it
appears.

If you are referring to the line:
Server Name: cifs/domain.local

Then this is where I stop understanding the error
messages, what is cifs? why is there a slash?

Does that help? Short answer is no I guess :)

-----Original Message-----
Do you have a server with this name in your environment?
Laura