The KDC service hung on starting.

[Paul Mckenna]

Hello,

I keep getting this in the event log:

Event ID:7022
The Kerberos Key Distribution Center service hung on starting.

Whenever i restart the server, It's doesn't seem to be causing a problem as
if i look at services it tells me the KDC Service is started and people can
log just fine.
It just pops up an annoying box telling me 'At least one service has failed
to start'.

This is the only error i get in the system log during startup, i get a
couple of crypt32 errors in the application log but i imagine it's unrelated.

I've no idea where to start looking, is there a default timeout set on the
KDC service so if it doesn't start within say 30 seconds Windows thinks it's
hung?
I seem to be able to restart the service very quickly.

Any suggestions would be appreciated.

Thank you
Paul

[Allen Firouz]

Paul:

Run Netdiag (netdiag /test:kerberos /v) and DCdiag and check for Kerberos
consistency. If all is well, you can safely ignore this message.

-Allen Firouz

Post by Paul Mckenna
Hello,
Event ID:7022
The Kerberos Key Distribution Center service hung on starting.
Whenever i restart the server, It's doesn't seem to be causing a problem as
if i look at services it tells me the KDC Service is started and people can
log just fine.
It just pops up an annoying box telling me 'At least one service has failed
to start'.
This is the only error i get in the system log during startup, i get a
couple of crypt32 errors in the application log but i imagine it's unrelated.
I've no idea where to start looking, is there a default timeout set on the
KDC service so if it doesn't start within say 30 seconds Windows thinks it's
hung?
I seem to be able to restart the service very quickly.
Any suggestions would be appreciated.
Thank you
Paul

[Paul Mckenna]

Hi,

Thanks for your response, ran both tests and they passed ok..
But it got me thinking.
I Neglected to mention I had recently removed and reinstalled certificate
services following the Microsoft article 55151 (or some number like that) :)
.
I didn’t think this was relevant as I didn’t know Kerberos used certificate
services.. I guess if it’s available it uses it.
So anyway, I ran certutil –dcinfo and sure enough Kerberos was using the old
certificate. Once I deleted that and reboot it got itself a new certificate
and all was well once again.

Thanks again for your help it got me on the right track…

Post by Allen Firouz
Run Netdiag (netdiag /test:kerberos /v) and DCdiag and check for Kerberos
consistency. If all is well, you can safely ignore this message.
-Allen Firouz

Post by Paul Mckenna
Hello,
Event ID:7022
The Kerberos Key Distribution Center service hung on starting.
Whenever i restart the server, It's doesn't seem to be causing a problem as
if i look at services it tells me the KDC Service is started and people can
log just fine.
It just pops up an annoying box telling me 'At least one service has failed
to start'.
This is the only error i get in the system log during startup, i get a
couple of crypt32 errors in the application log but i imagine it's unrelated.
I've no idea where to start looking, is there a default timeout set on the
KDC service so if it doesn't start within say 30 seconds Windows thinks it's
hung?
I seem to be able to restart the service very quickly.
Any suggestions would be appreciated.
Thank you
Paul

[Rebecca Chen [MSFT]]

Hi Paul,

I would like to jump in and provide some points here.

Technically speaking, the DC will generate a self-signed certificate only
for EFS purpose. It is not directly related to the KDC error. Event ID 7022
is detailed in the following article, as Allen has stated, you can safely
ignore it after sucessfully running Dcdiag and netdiag. I believe
restarting DC also resulting restart DNS service which has resolved this
issue.

315951 "The Net Logon Service Hung on Starting" Is Recorded in the System
Even
http://support.microsoft.com/?id=315951

hope it helps!

Further questions, let's get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Svatos, Jan]

Hi guys,

same problem here - The KDC service hung on starting. - but when running
dcdiag:

Starting test: systemlog
An Error Event occured. EventID: 0xC0000007
Time Generated: 05/03/2005 20:28:53
Event String: The Security Account Manager failed a KDC request
An Error Event occured. EventID: 0xC0000007
Time Generated: 05/03/2005 20:28:53
Event String: The Security Account Manager failed a KDC request
An Error Event occured. EventID: 0xC0000007
Time Generated: 05/03/2005 20:29:00
Event String: The Security Account Manager failed a KDC request
An Error Event occured. EventID: 0xC0000007
Time Generated: 05/03/2005 20:29:00
Event String: The Security Account Manager failed a KDC request
An Error Event occured. EventID: 0xC0000007
Time Generated: 05/03/2005 20:29:03
Event String: The Security Account Manager failed a KDC request
An Error Event occured. EventID: 0xC0000007
Time Generated: 05/03/2005 20:29:03
Event String: The Security Account Manager failed a KDC request
An Error Event occured. EventID: 0xC0001B6E
Time Generated: 05/03/2005 20:35:00
(Event String could not be retrieved)
......................... PHAMX1 failed test systemlog

what could be wrong?

Jan