Prev: MOVING RID MASTER
Next: Password Export Server - Please install a local encryption key?
From: "Chris Geier" <chris.geier at on 31 Jan 2006 17:03
Anyone seen something like this. Even though it errors i actually get
in..Very odd

588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 00141178
588.684> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 0013CD20
588.680> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 00141280
588.684> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 0013CD20
588.680> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 00141228
588.684> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 0013CD20
588.680> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 00141120
588.684> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29 0013CD20
588.680> Kerb-Warn: Failed to verify AP request (need u2u? false):
0xc000006a. d
:\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753

From: Ace Fekay [MVP] on 5 Feb 2006 02:33
In news:BBC9F203-FA9D-46D0-B980-23299B511B72(a)microsoft.com,
Chris Geier <chris.geier at gmail.com> stated, which I commented on below:
> Anyone seen something like this. Even though it errors i actually get
> in..Very odd
>
> 588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 00141178 588.684> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
> 588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 0013CD20 588.680> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
> 588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 00141280 588.684> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
> 588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 0013CD20 588.680> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
> 588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 00141228 588.684> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
> 588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 0013CD20 588.680> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
> 588.684> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 00141120 588.684> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753
> 588.680> Kerb-Error: KerbVerifyApRequest failed to check ticket 29
> 0013CD20 588.680> Kerb-Warn: Failed to verify AP request (need u2u?
> false): 0xc000006a. d
> :\nt\ds\security\protocols\kerberos\client2\ctxtapi.cxx, line 3753

What Eventlog errors are on this machine? Post the EventID #s and their
Source please.

Are the internal machines only using (in IP properties) the internal DNS
server IP address that's hosting the AD DNS domain name or is it mixed with
internal and ISP's DNS in IP properties? It's an important factor to only
use the internal DNS because the ISP doesn't know anything about the AD
domain and cause numerous issues. Point to the internal DNS and configure a
Forwarder in DNS properties for efficient internet resolution.

Are the clocks on all machines synched within 5 minutes of each other? That
is a factor that will cause numerous issues if any of the clocks are skewed
more than 5 min (taking time zones and GMT into account).

Do you have a reverse zone created? That will eliminate 40960 and 40961
Event ID errors, if you have any.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.

Not sure how? It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Assimilation Imminent. Resistance is Futile.
Infinite Diversities in Infinite Combinations.

The only thing in life is change. Anything less is a blackhole consuming
unnecessary energy.
===========================


 | 
Pages: 1
Prev: MOVING RID MASTER
Next: Password Export Server - Please install a local encryption key?