For the last month or so I've been getting frequent KDS errors in the System Event Log on my Windows 2003 domain controllers, all generated from Windows 2008 R2 servers (some used for backups, some used for terminal services).
Here are the errors...
Event ID 26 - Source KDC
Quote:
While processing an AS request for target service krbtgt, the account user1 did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 2). The requested etypes were 18. The accounts available etypes were 23 -133 -128 3 1 -140.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event ID 27 - Source KDC
Quote:
While processing a TGS request for the target server krbtgt/DOMAIN.LOCAL, the account
USER1@DOMAIN.LOCAL did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18. The accounts available etypes were 23 -133 -128 3 1.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Can anyone help me get to the bottom of this? Is it something I need to worry about or can I just ignore these errors? Nothing seems to be affected by it.
Thanks,
James
