Event ID 537 & 529 = slow logons

[steele_uk]

We are having really slow logons at the moment. The client event logs show an error of 529 & 537 for every logon, even though the user still manages to login, although very slowly.

 

Typical mesasge is;

 

Logon Failure:

Reason: Unknown user name or bad password

User Name:

Domain: xxxxx

Logon Type: 2

Logon Process: User32

Authentication Package: Negotiate

Workstation Name: class1-14

 

&

 

Logon Failure:

Reason: An error occurred during logon

User Name: student

Domain: xxxxx

Logon Type: 11

Logon Process: User32

Authentication Package: Negotiate

Workstation Name Class1-14

Status code: 0xC000005E

Substatus code: 0x0

 

Logins taking about 15 minutes at the worst times of the day.

 

Anyone come across this?

[danrhodes]

Have you looked into DNS? If so then how about?

 

1) No explicit Kerberos trust between the domain containing the machine doing the accessing and the domain containing the machine being accessed; in other words only an external trust or no trust between the domains.

 

2) The SPN for the target machine was unavailable to the requesting machine, at the time of the request. This could be due to a lack of routing hints on the trust, or due to the absence of the SPN in the directory. The SETSPN utility in the Windows 2000 Resource Kit can be used to see if the SPN is in place, and to re-register it if not (SETSPN.EXE -L COMPUTERNAME)".