About troubleshooting Kerberos authentication errors

Products

• Control Compliance Suite Response Assessment Module

Issue/Introduction

 

Resolution

About troubleshooting Kerberos authentication errors

Kerberos is the primary authentication mechanism used in Active Directory.

You should do the following:

- Verify that you can do a nslookup on the FQDN of the computer.

- Verify that the NIC setting for the DNS has the correct domain that is listed in the DNS suffix for the connection.

- Verify that the WINS has no duplicate records that may point to other IP addresses or may point to other domains for the computer.

- Verify that the DNS does not have duplicate records for the computer.

- Verify the host record of the computer is in the correct domain.

- Verify that Active Directory has no duplicate listing for the computer.

- Verify that the account that is used for ASP has access to the SQL Server and the RAM_db database.

- Download and install the Windows Server 2003 Support Tools.

You should download either the Windows Server 2003 Support Tools or the Windows Server 2003 Service Pack 1 Support Tools from Microsoft.

- After the Support Tools installation, you reset an SPN.

To reset an SPN