Authentication Ticket Request - User Name... Expand / Collapse
Author
Message
Posted 6/26/2012 10:53:06 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 6/27/2012 1:28:52 PM
Posts: 1, Visits: 5
We are seeing some new failed authentication ticket requests, with the User Name field containing a long multi-case string of characters, not the usual user or machine name. Started just after 6 PM last night, fairly regularly about every 2 to 2.5 hours or so.

Realm name is correct, our local domain. Ticket Options are 0x40810010 and Result Code is 0x6. Client address is one of our servers, source of the 672 event log entry is one of the domain controllers.

Trying to figure out what's causing this.

User Name: CyBAAAAUBQYAMHArBw..., roughly 150 characters.

Love to read mysteries, don't like them on the network.

Thanks!

--Terry
Post #1035
Posted 3/29/2016 1:41:56 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 3/29/2016 11:41:29 AM
Posts: 1, Visits: 0
Hi, I got the similar issues. Does anyone know what the root cause might be in Kerberos client or any suggestions about how to troubleshoot the issues after locating the server through client address. Thanks.
Post #5177
Posted 3/29/2016 2:42:39 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 212, Visits: 0
Once you locate the source then try to determine why it is failing kerberos authentication. If the username is a long string that is repeatedly then it could be some sort of automated process.
Post #5178
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 6:12pm