Strange serv2k3 message

[folken]

There seems to be a distinct lack of a serv2k3 section so i guess i'll just post here.
Anyway... I decided to check the logs on my file server today and a specific message cought my eye (due to several hundred entries).

Source: LSASRV
Category: SPNEGO (Negotiator)
Event ID: 40960
Type: Warning
User: N/A

The Security System detected an authentication error for the server DNS/ns1.mydyndns.org. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".

This messages appears every 1 hour exactly. 5:08, 6:08, 7:08, etc... It is the only warning message that appears in the log. I researched that event ID and most people seemed to have it appear along with 40961 and it occured on domain controllers. My server is currently not a domain controller. It is only running DHCP, DNS, and IIS FTP. These messages first appeared on 1/15/06 at 1:08pm. I havent gotten any updates, made any changes or restarted my server since 1/1/06 (had a 12hr power outtage).
My domain name is registered through dyndns.org but I do not update my ip using this server, my router updates the dns record when my ip changes (dsl ip changes every week or so even when connected 24/7). It is sort of bizarre why ns1.mydyndns.org would appear on there. I even cut off all ports forwarded to that server and the message still shows up.

I'm sure the problem will wind up being something DNS related... On windows servers, when in doubt blame dns lol.

 

[riser]

Set your server's time back by 3-7 minutes. Kerberos as a 5 minute window for authentication and since it's happening every hour and it's x:08, the Ticket created by Kerberos might be missing by 3 minutes. I'd set your time back 5 minutes (x:03 for the next error) and see if that goes away.

 

[folken]

I set the time back 5min and let it run overnight. Now all the errors appear at 5:03, 6:03, 7:03, etc... and show no sign of stopping. There is nothing else in the system log other than system uptime messages. There arn't any events in the other logs that relate to these or that appear anywhere near them. I think I'll try stopping some services one at a time before error events to see if any of them might be a contributer. Maybe my dhcp, dns, or ftp is havin problems.

 

[riser]

I imagine you're running a web server with this too? It might be a problem in that.

Here's a technet. I thought it may have been a kerberos thing but it's something else.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecure/html/http-sso-2.asp

 

[apache_lives]

speaking of server - every time i boot into windows server 2003 in my server (heh where else) i get a error device failed to load - every time i change something on me server ill get that and it wont go away till i reinstall the whole dam thing (fcukin' pain in the ass).

Any way to disable the message since the thing still runs fine (been like that on the current install for months)