Kerberos身份验证票证-事件ID 4768 -审核失败

Question

我使用kerberos对用户及其失败进行身份验证。事件查看器中的审计失败详细信息如下

A Kerberos authentication ticket (TGT) was requested.

Account Information:
Account Name:
 HTTP
Supplied Realm Name:
TEST.COM
User ID:
 NULL SID 

Service Information:
Service Name:
 krbtgt/TEST.COM
Service ID:
 NULL SID

Network Information:
Client Address:
::ffff:2.2.2.60
Client Port:
 42062

Additional Information:
Ticket Options:
0x40800000
Result Code:
 0x6
Ticket Encryption Type:
0xffffffff
Pre-Authentication Type:
-

Certificate Information:
Certificate Issuer Name:

Certificate Serial Number:

Certificate Thumbprint:


Certificate information is only provided if a certificate was used for pre-authentication.
Pre-authentication types, ticket options, encryption types and result codes are defined in RFC 4120.

结果代码0x6意味着Kerberos数据库中不存在用户，但是我已经在AD中配置了用户。这是windows server 2008 (non-R2)，用户帐户名为"axax“，用户登录名为”HTTP/ax.test.com“。域名是test.com。从wireshark中，我可以看到我的客户端正在发送具有正确的2个名称字符串项HTTP & axax.test.com的AS-REQ。我不知道为什么会失败。

Answer 1

我发现了问题。微软2008 (非R2)存在软件缺陷。安装修补程序(KB951191)后解决问题。