Home > Event Id > Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8)

Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8)

Contents

Event ID: 27 Source: KDC Source: KDC Maintenance: Administration tasks for the maintenance of Active Directory. Ficher King, sis you apply the HotFix as well to your 2008R2 DC? From what I read, the error can be safely ignored. But I re-read the KB article more closely and applied the GP changes outlined at the bottom of it. http://canondrivebh.com/event-id/while-processing-a-tgs-request-for-the-target-server-the-account-did-not-have-a-suitable-key.html

On the Linux side, we had to type "kinit [email protected]" to get a ticket. The accounts available etypes were 23-133-12831. The article provides information about a hotfix that solved my problem. Edited by Nexcompac Monday, April 02, 2012 5:43 PM Monday, April 02, 2012 5:42 PM Reply | Quote Microsoft is conducting an online survey to understand your opinion of the Technet

Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8)

The faulty DC had only two cached tickets, another running DC had four. By doing the above method , you would get rid of the event. From her… Storage Software Windows Server 2008 Configuring Backup Exec 2012 for VMware Image Level Backups Video by: Rodney This tutorial will walk an individual through the steps necessary to enable Are you planning or able to demote that 2k3 machine anytime soon?

x 24 Private comment: Subscribers only. Join Now For immediate help use Live now! Assessment --------------------------- The problem is that the client is sending a TGS request using the Etype of 18 (AES). Event Id 27 E1cexpress The requested etypes were 18.

If the Kerberos authentication works properly, you can safely ignore the events. The detais. It basically means that the encryption type between the client and server for kerberos is not same. It seems to be only a small number.

The domain controller is just informing the client what Etypes it supports. Event Id 27 E1dexpress One day, backups begin to fail with a message that the disk is full. You can refer to the following post http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/29f55875-f3ee-476c-9d74-94f1b74edb31 Also Go to Solution 11 Comments LVL 12 Overall: Level 12 Windows Server 2008 6 Windows Server 2003 4 Message Active 4 Verify your ticket granting service with kerbtray select the SPN and control the tab encryption type.

Event Id 27 E1iexpress

Good luck with your season. 0 Write Comment First Name Please enter a first name Last Name Please enter a last name Email We will never share this with anyone. {{offlineMessage}} Store Store home Devices Microsoft Surface PCs & tablets Xbox Virtual reality Accessories Windows phone Software Office Windows Additional software Apps All apps Windows apps Windows phone apps Games Xbox Did Not Have A Suitable Key For Generating A Kerberos Ticket (the Missing Key Has An Id Of 8) The error that is being logged on the Windows 2003 domain controller can safely be ignored as it is by design. Event Id 27 Network Link Is Disconnected While processing a TGS request for the target server krbtgt/domain.com, the account [email protected] did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of

I found an explanantion and hotfix for user accounts causing this error: http://support.microsoft.com/kb/978055. http://canondrivebh.com/event-id/security-kerberos-event-id-4-krb-ap-err-modified.html Login By creating an account, you're agreeing to our Terms of Use and our Privacy Policy © Copyright 2006-2016 Spiceworks Inc. The domain controller is just informing the client what Etypes it supports. read more... Event Id 14 Kerberos-key-distribution-center

All rights reserved. Since the errors are benign, I'll wait until April, at which time I will likely go straight to 2k12. I did not apply the HotFix. http://canondrivebh.com/event-id/event-id-7-kerberos-key-distribution-center.html Concepts to understand: What is Kerberos?

Solved KDC Event ID 27 errors on Server 2003 in Server 2008 R2 domain Posted on 2011-12-13 Windows Server 2003 Windows Server 2008 1 Verified Solution 11 Comments 4,622 Views Last The Accounts Available Etypes Were 23 -133 -128 3 1 Join the community of 500,000 technology professionals and ask your questions. Most of my errors are computer account, but some are users on Win 7 machines.

I understand what causes the problem, but I want to get rid of the errors.

I would be interested to hear if it works. 0 Message Expert Comment by:PaidToSki2012-11-07 I, like you, don't like having errors to parse through that don't need to be there. The requested etypes were 18. By creating an account, you're agreeing to our Terms of Use and our Privacy Policy Not a member? Kerberos Etypes Is the fix a combination of both the GPO and the HF? 0 Message Author Comment by:fisher_king2012-11-06 Actually, the problems returned a short time after I thought the GP change

Rebooted the DC in an attempt to "reload" the ticket cache. According to my research, this is by default and the errors can be ignored. Connect with top rated Experts 12 Experts available now in Live! weblink Add link Text to display: Where should this link go?

Join Now For immediate help use Live now! The requested etypes were 18. Sunday, June 14, 2009 11:30 AM Reply | Quote 0 Sign in to vote Pronichkin,I tried to access the links you mention above but they ask for login information to an Join & Ask a Question Need Help in Real-Time?

Regards, Navdeep v-2nas 0 Message Author Comment by:fisher_king2011-12-15 I found both of those articles previously - I had obtained the hotfix link under the workaround section of the KB article. TheEventId.Net for Splunk Add-onassumes thatSplunkis collecting information from Windows servers and workstation via the Splunk Universal Forwarder. All rights reserved. By creating an account, you're agreeing to our Terms of Use, Privacy Policy and to receive emails from Spiceworks.

The error that is being logged on the domain controller can safely be ignored as it is by design.The domain controller is just informing the client what etypes it does support. x 48 Christophe Lubrano di Ciccone This happened to me in a Active Directory 2003 Forest -native mode with Windows 2008 R2 SP1 DCs recently installed and SAP JEE. Etype are fixed in RFC. You can refer to the following post http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/29f55875-f3ee-476c-9d74-94f1b74edb31 Also check the follow KB article http://support.microsoft.com/kb/977321 Hope this helps.

The requested etypes were 18. Wednesday, April 21, 2010 2:21 PM Reply | Quote 1 Sign in to vote http://support.microsoft.com/kb/978055 Monday, December 20, 2010 1:05 PM Reply | Quote 0 Sign in to vote Error messages: -------------------------- Source: KDC Event-ID: 27 Type: Error While processing a TGS request for the target server krbtgt/WEISHAUPT.INT, the account [email protected] did not have a suitable key for generating a Jalapeno Nov 3, 2011 unx Entertainment @Mark8081: You should enable DES Encryption on the Windows 7 (Server 2008 R2) machines: http://support.microsoft.com/kb/977321 Scroll down to "Workaround", "1.

Windows 2003 does not support this etype for Kerberos where 2008 does. This Article and the Links apply to… Windows 7 Windows Server 2008 Backup Exec 2014 – Overview and Differences from 2012 Video by: Rodney This tutorial will give a short introduction All rights reserved.Newsletter|Contact Us|Privacy Statement|Terms of Use|Trademarks|Site Feedback TechNet Products IT Resources Downloads Training Support Products Windows Windows Server System Center Browser   Office Office 365 Exchange Server   SQL Server Vista clients are then falling back to the supported types.

May 05, 2010 While processing a TGS request for the target server krbtgt/GEJCC.GEJOHNSON.COM, the account [email protected] did not have a suitable

The error that is being logged on the domain controller can safely be ignored as it is by design. It is possible that adding the DefaultEncryptionType reg key as outlined in this thread will actually prevent the error: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24906105.html But my 2008 DC is also running Exchange 2k7 and adding I am able to demote the 2k3 server, but am intentionally keeping it as a second DC for redundancy.