|
|
|
Forum Newbie
Group: Forum Members
Last Login: 6/27/2012 1:28:52 PM
Posts: 1,
Visits: 5
|
|
We are seeing some new failed authentication ticket requests, with the User Name field containing a long multi-case string of characters, not the usual user or machine name. Started just after 6 PM last night, fairly regularly about every 2 to 2.5 hours or so.
Realm name is correct, our local domain. Ticket Options are 0x40810010 and Result Code is 0x6. Client address is one of our servers, source of the 672 event log entry is one of the domain controllers.
Trying to figure out what's causing this.
User Name: CyBAAAAUBQYAMHArBw..., roughly 150 characters.
Love to read mysteries, don't like them on the network.
Thanks!
--Terry
|
|
|
|
|
Forum Newbie
Group: Forum Members
Last Login: 3/29/2016 11:41:29 AM
Posts: 1,
Visits: 0
|
|
| Hi, I got the similar issues. Does anyone know what the root cause might be in Kerberos client or any suggestions about how to troubleshoot the issues after locating the server through client address. Thanks.
|
|
|
|
|
Supreme Being
Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237,
Visits: 0
|
|
| Once you locate the source then try to determine why it is failing kerberos authentication. If the username is a long string that is repeatedly then it could be some sort of automated process.
|
|
|
|