Monday, November 18, 2013

Kerberos Client Received KRB_AP_ERR_TKT_NYV Error

Further to the problem mentioned in the previous blog post. It was found that the below entry appears in the Windows System Event log of the member servers:

Event ID 5 - The kerberos client received a KRB_AP_ERR_TKT_NYV error from the server KANDTIDC1$. This indicates that the ticket presented to that server is not yet valid (due to discrepancy between ticket and server time). Contact your system administrator to make sure the client and server times are synchronized, and that the time for the Key Distribution Center Service (KDC) in realm kandti.com is synchronized with the KDC in the client realm.
I did a check on the date and time of the domain controller KANDTIDC1 and found that both the date and time are incorrect. The correct date and time were then keyed in for the domain controller and a re-boot was carried out for all the member servers.

After the re-boot, the abovementioned error message does not appear in the Windows System Event log anymore. I tried connecting to the member servers using the server name and I am able to connect without any problem.


No comments:

Post a Comment