About troubleshooting Kerberos authentication errors

book

Article ID: 179284

calendar_today

Updated On:

Products

Control Compliance Suite Response Assessment Module

Issue/Introduction

 

Resolution


About troubleshooting Kerberos authentication errors
Kerberos is the primary authentication mechanism used in Active Directory.
You should do the following:
- Verify that you can do a nslookup on the FQDN of the computer.
- Verify that the NIC setting for the DNS has the correct domain that is listed in the DNS suffix for the connection.
- Verify that the WINS has no duplicate records that may point to other IP addresses or may point to other domains for the computer.
- Verify that the DNS does not have duplicate records for the computer.
- Verify the host record of the computer is in the correct domain.
- Verify that Active Directory has no duplicate listing for the computer.
- Verify that the account that is used for ASP has access to the SQL Server and the RAM_db database.
- Download and install the Windows Server 2003 Support Tools.
You should download either the Windows Server 2003 Support Tools or the Windows Server 2003 Service Pack 1 Support Tools from Microsoft.
- After the Support Tools installation, you reset an SPN.
To reset an SPN