Sunday night one of our servers (2008 R2 virtual) started registering Kerberos client error 4 and couldn't authenticate with the domain. Some of the services went offline and we weren't able to login to the server with the domain account but got in with the local admin PW. We rebooted the server and everything came back online ok...there was no indication as to what caused the issue in the first place and was scratching my head. The original error message was:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server SERVERNAME$. The target name used was ldap/SERVERNAME.DOMAIN.internal. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please...