Error code

0x80090322 — The main name of the target is incorrect

Kerberos negotiation cannot properly validate the target service, often because of a PNS or,an inconsistent DNS name.

TopicActive Directory →

View my favorites

0x80090322 — The main name of the target is incorrect

Field: KerberosPriority: High

What does this error mean?

Kerberos negotiation cannot properly validate the target service, often because of a PNS or,an inconsistent DNS name.

Probable causes

FPS duplicated or assigned to the wrong account
access via an undeclared alias
DNS pointing to another server
former service account

Verification and resolution

Check the name actually used by the client
Control the SPNs with tern -Q and tern -X
Compare DNS, service account and server name
Purging the tickets Kerberos only after correction

Precaution: Do not delete a PNS before you identify which service and account the use.

← Return to error codes

♡ 0