none
Kerberos error KDC_ERR_BADOPTION name-type Enterprise Name RRS feed

  • Question

  • I have a number of Citrix servers accessed through Kerberos constrained delegation. Occasionally a user will experience an account lockout, so I captured the logon process and found the following Kerberos error. The server being logged on to is daywinnisp047z@companydomain.net.

    error_code: krb5kdc_err_badoption (13)
    server name (enterprise name): daywinnisp047z$@companydomain.net
    name-type: Enterprise Name (10)
    Name: daywinnisp047z$@companydomain.net

    Normally such a krb error would show a specific protocol and host for which I need to either setup constrained delegation or remove from the logon process, but in this case I don't know why the server being logged into is throwing this error or why the name includes a $.  Any help would be appreciated.

    Friday, February 24, 2017 3:01 PM

All replies