You are viewing limited content. For full access, please sign in.

Question

Question

KRB_AP_ERR_MODIFIED Error

asked on August 29, 2021 Show version history

Hello,

 

The error mentioned below is encountered as per the screen print attached.

"" The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server LF_Admin. The target name used was HTTP/w-lf-appserv. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (AUC.EGY) is different from the client domain (AUC.EGY), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server "".

 

image (18).png
image (18).png (122.09 KB)
0 0

Replies

replied on September 10, 2021

The cause suggested in the message ("This can occur when...") is the most likely. Have you confirmed that you're not in that situation?

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.