Hi All,
I've got a problem with my Window Server 2012 hyper-v cluster replica role. It just will not start at all.
I've looked in depth into this and can see it could be related to a authenticate issue.
Each time I try and start the replica role, it will fail and on the computer object associated with the cluster name, the bad password count jumps up by one and is stamped with the date time of when I tried to start the role.
Also, on the host that I'm starting the role on I get a security audit failure event with ID 4625, which shows the following:
An account failed to log on. Subject: Security ID: SYSTEM Account Name: HOST10$ Account Domain: MYDOMAIN Logon ID: 0x3E7 Logon Type: 8 Account For Which Logon Failed: Security ID: NULL SID Account Name: CLUSTER-OBJECT-HV$ Account Domain: MYDOMAIN.ROOT.LOCAL Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xC000006D Sub Status: 0xC000006A Process Information: Caller Process ID: 0x1288 Caller Process Name: C:\Windows\Cluster\rhs.exe Network Information: Workstation Name: HOST10 Source Network Address: - Source Port: - Detailed Authentication Information: Logon Process: Advapi Authentication Package: Negotiate Transited Services: - Package Name (NTLM only): - Key Length: 0
I've also traced this out via Wireshark and can see that the host is requesting a ticket for krbtgt/mydomain.root.local via a AS-REQ, but it recives back a KRB5KDC_ERR_PREAUTH_REQUIRED
I've really stuck with this, can anyone help?
Thanks Z