Join Log in
Score:0
avatar Server

Windows Server 2012 R2, Kerberos: Should the SPN "host/localhost" exist?

pt flag
Larsen

I noticed that the eventlog "Microsoft-Windows-Security-Kerberos" is filled with the same entry around every minute (sometimes three times per minute, sometimes only after two or three minutes):

  • Event ID: 100
  • Description (roughly translated from German): The Service Principal Name "host/[email protected]" is not registered, causing an error with Kerberos authentication: 0x7. Use the command line tool "setspn.exe" to register the SPN

This happens on our primary domain controller (also hosting Exchange 2013), but not on our secondary.

I have searched a lot, but couldn't find anything applicable except for https://comp.protocols.kerberos.narkive.com/WfAhMzuZ/host-localhost-principal:

There are significant security issues to having a host/localhost on all your machines. If one of your machines is compromised it can be used to attack the other machines.

I have no idea which service might be causing those entries. I could register the SPN, but don't know if this is a good idea or could be causing other problems. Also, I didn't notice any problems so far that might be caused by those entries.

  • How can I find out which service is causing this?
  • Should I create the SPN?
184
0 + 0
mx flag
Jan
do you found a solution for ur problem?
0
Reply
pt flag
Larsen
No (and some characters to fit the minimum comment length...)
0
Reply
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.