I have AD setup for authentication, and it appears that all the users can access the SA just fine, but whenever i use the "Test Configuration" button, my DC logs about 15 KDC errors: Anyone ever see this?
Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 27
Time: 7:40:34 AM
While processing a TGS request for the target server host/sa2000, the accoun t(saxxxx) did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 17. The accounts available etypes were 23 -133 -128 3 1.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
I haven't seen or heard of that error before.
Have you tried creating a new domain admin account to see if that fixes the issue? Maybe there is something wrong with the user account you are using.
Thanks, i was thinking that as well, so after i posted on here I went and created a new admin account, following the Juniper KB article, KB2624, and all seems to be ok now.
Odd, it may have been due to the upgrade from 5.x to 6.x from some time ago and just never noticed it.