SPNEGO (Negotiator) Error message

[rocketlauncher]

Guys,

Hope someone can explain why this happens and how to fix it.

I'm in the process of creating a new AD strucutre for our company Operations Center, but I noticed the event below on the newly installed domain controller.

-------------------
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 1/13/2006
Time: 12:14:38 PM
User: N/A
Computer: CTVDC1
Description:
The Security System detected an authentication error for the server LDAP/Localhost. The failure code from

authentication protocol Kerberos was "There are currently no logon servers available to service the logon

request.
(0xc000005e)".

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:
0000: 5e 00 00 c0 ^..À
-------------------------------------------

This is the first DC on the Forest and Domain. This happens everytime I restart the server. Is this critical or not?

If it is any hints on how to fix it. I've already search google and microsoft, but didn't fin any solutions.

Also, I've notice the same error message on other W2K3 domain controllers. I've alredy tried installing DNS before dcpromo.

Thanks in advance.

Rocket

 

[NetIntruder]

What is DNS pointing to on your NIC settings?

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

 

[rocketlauncher]

Hi NetIntruder,

First of all, thanks for the reply.

I'ts pointing to itself (internal IP Address). I can access the internet from the server.

I should of mention that I'm trying to setup the new network here in our current office. Then, take all equipment and hook it up at the new location and just change the pix config to reflect IP Addressing for the outside interface, the inside interface will stay as it is.

So I have the following network config:

router - firewall - Switch - Firewall - New Network

Nothing is allowed into the New Network, but everything is allowed out from the new network. I have internet access from New Network and I can access other devices of Internal LAN from New Network.

Would this be the problem?

Thaanks again,
Rocket

 

[NetIntruder]

Is this server a Global Catalog? Try the Directory Services Reporting tool linked below from MS - it contains a wealth of information when troubleshooting DC issues.

http://www.microsoft.com/downloads/...7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en

this can be a lot of info to tool through, so be prepared

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003