Hi All,
I recently upgraded a firewall with site-to-site vpn working perfectly and name resolution as well but when I try to connect to the server on the other side of the tunnel using the IP address it works fine but when I use hostname or FQDN I get the error message below:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server XYZ001$. The target name used was CDE_YYZ\XYZ001$. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (YYZ.AB.CDE.COM), and the client realm. Please contact your system administrator.
Setup
Site A has Windows 2003 server
Site B has Windows 2000 server running
The domain name are the same i.e. (YYZ.AB.CDE.COM)
both servers are running Routing and remote access
Replication is being configured for both sites using AD Sites and Replication
I noticed that when I try to access the Site A using hostname it resolves perfectly
I also noticed that when I do an nslookup for Site B from Site A it shows 2 IP addresses one for the NIC card and the other PPP Adapter.
I have checked the following:
1) did an nslookup and reverse which resolved perfectly
2) Checked for duplicate SPNs using ldp and setspn no duplicates found
Please help!!!
Thank you in advance
I recently upgraded a firewall with site-to-site vpn working perfectly and name resolution as well but when I try to connect to the server on the other side of the tunnel using the IP address it works fine but when I use hostname or FQDN I get the error message below:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server XYZ001$. The target name used was CDE_YYZ\XYZ001$. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (YYZ.AB.CDE.COM), and the client realm. Please contact your system administrator.
Setup
Site A has Windows 2003 server
Site B has Windows 2000 server running
The domain name are the same i.e. (YYZ.AB.CDE.COM)
both servers are running Routing and remote access
Replication is being configured for both sites using AD Sites and Replication
I noticed that when I try to access the Site A using hostname it resolves perfectly
I also noticed that when I do an nslookup for Site B from Site A it shows 2 IP addresses one for the NIC card and the other PPP Adapter.
I have checked the following:
1) did an nslookup and reverse which resolved perfectly
2) Checked for duplicate SPNs using ldp and setspn no duplicates found
Please help!!!
Thank you in advance