Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Server & Application Monitor (SAM) > NIC and Volumes go into an Unknown state

NIC and Volumes go into an Unknown state

Table of contents
No headers


Issue: On several servers interfaces and disks will go into an Unknown state temporarily.

Description: When the NIC and volumes are unknown, you may see an error similar to the following on the target server:

Log Name:       System
Source:           Microsoft-Windows-Security-Kerberos
Date:              17/05/2010 22:14:47
Event ID:         4
Task Category:  None
Level:             Error
Keywords:        Classic
User:              N/A
Computer:       (Computer Name)
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server (NAME). The target name used was ldap/NAME. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain is different from the client domain, check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.

You may also see the same KRB_AP_ERR_MODIFIED error in a wireshark trace.

Cause: This can be caused by incorrect DNS ordering in the TCP/IP properties on the target server. 

Resolution: Ensure the DNS is set up to query the correct server and then run ipconfig/flushdns followed by ipconfig/registerdns.


Last modified