Secure LDAP conn

[Federline]

There are several client workstations running with on my server connected to a domain. Everything was working fine but don’t know what went wrong suddenly I started getting the following error message on all of my workstations:

“The path is invalid to the ldap server (ldap/dc2.domain.com/domain.com@domain.com.”

And this is what got in Event Viewer:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 5/23/2007
Time: 4:41:38 AM
User: N/A
Computer: xpstation
Description:
The Security System could not establish a secured connection with the erver ldap/dc2.domain.com/domain.com@domain.com. No authentication protocol was available.

Can anybody tell where is the path pulled from? Is it ldap/dc2.domain.com ???

[Jason A]

Your Event log is showing up as Event ID 40961 which use to be related to DNS reverse-lookup zone. Microsoft is well aware of this Event ID and hence they say that this problem occurs because the version number of the KRBTGT account increases when you perform an authoritative restoration. The KRBTGT account is a service account that is used by the Kerberos Key Distribution Center (KDC) service. See M939820 for a hotfix applicable to Microsoft Windows Server 2003.

[rossen]

Check out this Microsoft Article for more information on that particular Event ID and error: http://www.microsoft.com/technet/sup...asrv&LCID=1033

[Federline]

Thank you very much for the help guys. However I found a HOTFIX for the same in this Microsoft KB http://support.microsoft.com/kb/885887/en-us. I’ll surely try this out and hope it fixes the problem. Apart from this, there is a new problem now. Since yesterday I’m also getting Event ID 1030. Mostly it occurs at the night time. Following is the complete information listed in Event Viewer:

Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 861
Date: 6/6/2007
Time: 7:38:26 AM
User: NT AUTHORITY\SYSTEM
Computer: xpstation
Description:
The Windows Firewall has detected an application listening for incoming
traffic.

Name: -
Path: C:\WINDOWS\system32\lsass.exe
Process identifier: 756
User account: SYSTEM
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 2321
Allowed: No
User notified: No

Any idea?