Kerberos客户端从服务器收到KRB_AP_ERR_TKT_NYV错误。这表示提供给该服务器的票证无效。 [英] Kerberos client received a KRB_AP_ERR_TKT_NYV error from the server. This indicates that the ticket presented to that server is not valid.

问题描述

我们在一个或多个SharePoint搜索服务器上看到以下错误：

Periodically we are seeing the following error on one or more of our SharePoint Search Servers:

EventID：0x0000005 （5）

EventID: 0x0000005 (5)

Kerberos客户端从服务器XX XX收到KRB_AP_ERR_TKT_NYV错误。这表示提供给该服务器的票证尚未生效（由于票证和服务器时间之间存在差异。请与管理员联系以确保hosthostyclient
和服务器时间同步以及密钥分发中心的时间领域XX XX中的服务（KDC）与客户端领域中的KDC同步。

The Kerberos client received a KRB_AP_ERR_TKT_NYV error from the server XX XX. This indicates that the ticket presented to that server is not yet valid (due to a discrepancy between ticket and server time. Contact your administrator to make sure the hosthostyclient and server times are synchronised and that the time for the Key Distribution Center Service (KDC) in realm XX XX is synchronised with the KDC in the client realm.

当我们收到警报并进行调查时，错误消失了，服务器和KDC是正确的时间同步。我们不相信服务器实际上总是失去时间同步。

By the time we are alerted and have investigated the error has gone away and the server and the KDC are correctly time synched. We don't believe that the servers actually ever lost time synch anyway.

我们唯一的另一个线索是，这似乎总是发生在SP搜索时服务器处于高CPU /内存之下，所以我们的想法可能就是服务器正在尝试联系KDC，然后因为资源过剩而失败。

The only other clue we have is that this always seems to happen at a point when the SP Search Server is under high CPU/Memory so our thinking is perhaps the server is trying to contact the KDC and then failing because its over-resourced.

有没有其他人看到这个关于SharePoint的错误搜索？

Has anyone else seen this error with regards to SharePoint Search?

请不要指向任何有关同步时间的MS文章 - 例如  https ：//social.technet.microsoft.com/wiki/contents/articles/12846.event-id-5-kerberos-client-configuration.aspx - 因为我们已经知道这个决议。我们只需要
了解为什么会不时在各个SP搜索服务器上发生这种情况。

Please don't point me towards any MS articles on synching time - for example https://social.technet.microsoft.com/wiki/contents/articles/12846.event-id-5-kerberos-client-configuration.aspx - as we're already aware of this resolution. We just need to understand why this is happening on individual SP Search Servers from time to time.

谢谢

推荐答案

您好etala，

Hi etala,

为了缩小问题范围，我建议您在SharePoint搜索服务器上添加更多内存。

To narrow down the issue, I suggest you could add more RAM on the SharePoint search server.

更多参考资料：

5种清除记忆的方法&增加Windows计算机上的RAM。

5 Ways to Clear Memory & Increase RAM on Your Windows Computer.

https://www.makeuseof.com/tag/5-ways-clear-memory-increase-ram-windows-computer/

最好的问候，

Sara Fan

这篇关于Kerberos客户端从服务器收到KRB_AP_ERR_TKT_NYV错误。这表示提供给该服务器的票证无效。的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！