The kerberos subsystem encountered a PAC verification failure...ISA2K & W2k3...

  • From: Marvin Cummings <MarvinC@xxxxxxxxx>
  • To: ISA Admin <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 22 Oct 2004 04:34:41 -0400

Anyone come across the following errors in their event log: 

Event ID: 5719
This computer was not able to set up a secure session with a domain
controller in domain mydomain due to the following:
There are currently no logon servers available to service the logon request.  
This may lead to authentication problems. Make sure that this computer
is connected to the network. If the problem persists, please contact
your domain administrator.

ADDITIONAL INFO 
If this computer is a domain controller for the specified domain, it
sets up the secure session to the primary domain controller emulator
in the specified domain. Otherwise, this computer sets up the secure
session to any domain controller in the specified domain.

Event ID: 7
The kerberos subsystem encountered a PAC verification failure.  This
indicates that the PAC from the client nuisasrvr$ in realm
my.domain.com had a PAC which failed to verify or was modified. 
Contact your system administrator.

This ISA server computer isn't a domain controller and I can access
the domain controller fine. The ISA server passes a netdiag fine so
I'm kinda lost on where to check next.

Any responses are appreciated.


Other related posts: