| Author |
Message |
James
Guest
|
 Posted:
Thu Sep 22, 2005 4:50 pm Post subject:
Event ID 11 KCC |
|
|
I'm seeing this error on some child domain controllers:
Event ID 11
Source KDC
There are multiple accounts with name cifs/dc.parentdomain.com of type
DS_SERVICE_PRINCIPAL_NAME.
The duplicate account references a DC in the parent domain. Only one child
domain's DCs are logging this error. I've done a dump using ldifde and done
an ldp search for both the parent and child domain, and I cannot find even
one servicePrinipalName entry that matches the error, much less multiples.
I'm stuck, any suggestions? |
|
| Back to top |
|
 |
Don Wilwol
Guest
|
| Posted:
Fri Sep 23, 2005 4:51 pm Post subject:
Re: Event ID 11 KCC |
|
|
look at this
http://www.planetmagpie.com/techtips/multiple-accounts.htm
see if it fits
--
Hope it helps...........
dw
Don Wilwol
Blog - http://spaces.msn.com/members/wilwol/
Web - http://capital.net/~wilwol/dw.htm
DonWilwol(REMOVE)@yahoo.com
"James" <James@discussions.microsoft.com> wrote in message
news:4FB5AB97-431C-468F-9CF9-72C57D91966A@microsoft.com...
| Quote: | I'm seeing this error on some child domain controllers:
Event ID 11
Source KDC
There are multiple accounts with name cifs/dc.parentdomain.com of type
DS_SERVICE_PRINCIPAL_NAME.
The duplicate account references a DC in the parent domain. Only one child
domain's DCs are logging this error. I've done a dump using ldifde and
done
an ldp search for both the parent and child domain, and I cannot find even
one servicePrinipalName entry that matches the error, much less multiples.
I'm stuck, any suggestions? |
|
|
| Back to top |
|
|
Don Wilwol
Guest
|
| Posted:
Fri Sep 23, 2005 4:51 pm Post subject:
Re: Event ID 11 KCC |
|
|
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/8127f5ed-4e05-4822-bfa9-402ceede4744.mspx
should have thrown this in also.
--
Hope it helps...........
dw
Don Wilwol
Blog - http://spaces.msn.com/members/wilwol/
Web - http://capital.net/~wilwol/dw.htm
DonWilwol(REMOVE)@yahoo.com
"James" <James@discussions.microsoft.com> wrote in message
news:4FB5AB97-431C-468F-9CF9-72C57D91966A@microsoft.com...
| Quote: | I'm seeing this error on some child domain controllers:
Event ID 11
Source KDC
There are multiple accounts with name cifs/dc.parentdomain.com of type
DS_SERVICE_PRINCIPAL_NAME.
The duplicate account references a DC in the parent domain. Only one child
domain's DCs are logging this error. I've done a dump using ldifde and
done
an ldp search for both the parent and child domain, and I cannot find even
one servicePrinipalName entry that matches the error, much less multiples.
I'm stuck, any suggestions? |
|
|
| Back to top |
|
|
James
Guest
|
| Posted:
Fri Sep 23, 2005 4:51 pm Post subject:
Re: Event ID 11 KCC |
|
|
That pretty much describes what I've already tried. Doing an ldifde dump of
the directory doesn't show any instance of cifs/domaincontroller, but I'm
still getting the errors in the logs.
"Don Wilwol" wrote:
| Quote: | look at this
http://www.planetmagpie.com/techtips/multiple-accounts.htm
see if it fits
--
Hope it helps...........
dw
Don Wilwol
Blog - http://spaces.msn.com/members/wilwol/
Web - http://capital.net/~wilwol/dw.htm
DonWilwol(REMOVE)@yahoo.com
"James" <James@discussions.microsoft.com> wrote in message
news:4FB5AB97-431C-468F-9CF9-72C57D91966A@microsoft.com...
I'm seeing this error on some child domain controllers:
Event ID 11
Source KDC
There are multiple accounts with name cifs/dc.parentdomain.com of type
DS_SERVICE_PRINCIPAL_NAME.
The duplicate account references a DC in the parent domain. Only one child
domain's DCs are logging this error. I've done a dump using ldifde and
done
an ldp search for both the parent and child domain, and I cannot find even
one servicePrinipalName entry that matches the error, much less multiples.
I'm stuck, any suggestions?
|
|
|
| Back to top |
|
|
Don Wilwol
Guest
|
| Posted:
Sat Sep 24, 2005 4:50 pm Post subject:
Re: Event ID 11 KCC |
|
|
next thing i would do is check DNS records for the dns server from the dc
throwing the errors. Maybe even point it to another DNS server to see if the
errors go away. It could be a stuck dns entry that needs to be removed.
dw
--
Hope it helps
dw
_______________________________
Don Wilwol
donwilwol(DELETE)@yahoo.com
http://spaces.msn.com/members/wilwol/
"James" <James@discussions.microsoft.com> wrote in message
news:61E78069-357B-433B-BE2A-FA22237A4A6C@microsoft.com...
| Quote: | That pretty much describes what I've already tried. Doing an ldifde dump
of
the directory doesn't show any instance of cifs/domaincontroller, but I'm
still getting the errors in the logs.
"Don Wilwol" wrote:
look at this
http://www.planetmagpie.com/techtips/multiple-accounts.htm
see if it fits
--
Hope it helps...........
dw
Don Wilwol
Blog - http://spaces.msn.com/members/wilwol/
Web - http://capital.net/~wilwol/dw.htm
DonWilwol(REMOVE)@yahoo.com
"James" <James@discussions.microsoft.com> wrote in message
news:4FB5AB97-431C-468F-9CF9-72C57D91966A@microsoft.com...
I'm seeing this error on some child domain controllers:
Event ID 11
Source KDC
There are multiple accounts with name cifs/dc.parentdomain.com of type
DS_SERVICE_PRINCIPAL_NAME.
The duplicate account references a DC in the parent domain. Only one
child
domain's DCs are logging this error. I've done a dump using ldifde and
done
an ldp search for both the parent and child domain, and I cannot find
even
one servicePrinipalName entry that matches the error, much less
multiples.
I'm stuck, any suggestions?
|
|
|
| Back to top |
|
|
edjoyner3
Guest
|
| Posted:
Thu Nov 10, 2005 5:50 pm Post subject:
RE: Event ID 11 KCC |
|
|
James if you haven't figured this one out then try this...
ldifde -f ldif.txt -t 3268 -d "DC=parentdomain,DC=com" -l
serviceprincipalname -r "(serviceprincipalname=host/dc*)" -p subtree
You most likely have two computer objects with the same HOST/dc or
HOST/dc.parentdomain.com attribute value. I am pretty certain this should be
unique accross the forest.
-Eddie Joyner
"James" wrote:
| Quote: | I'm seeing this error on some child domain controllers:
Event ID 11
Source KDC
There are multiple accounts with name cifs/dc.parentdomain.com of type
DS_SERVICE_PRINCIPAL_NAME.
The duplicate account references a DC in the parent domain. Only one child
domain's DCs are logging this error. I've done a dump using ldifde and done
an ldp search for both the parent and child domain, and I cannot find even
one servicePrinipalName entry that matches the error, much less multiples.
I'm stuck, any suggestions? |
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in