Event ID 6037 Source LsaSrv
I getting this event logged about every hr sometimes sooner. I have searched the net regarding this issue but have yet to find a solution.
Based upon other posts it looks to be an issue with SPN or AutoDiscover. I recently got my AutoDiscover working correctly without any errors or issue but this event has been logging prior to and after my AutoDiscover issues were resolved. Any help would be
greatly appreciated.
May 10th, 2010 7:19pm
Always post the complete event log entry.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.
"BizlogicIT" wrote in message
news:19f7ce4c-0493-4788-b5a8-63b59fc86a53...
I getting this event logged about every hr sometimes sooner. I have searched the net regarding this issue but have yet to find a solution.
Based upon other posts it looks to be an issue with SPN or AutoDiscover. I recently got my AutoDiscover working correctly without any errors or issue but this event has been logging prior to and after my AutoDiscover issues were resolved. Any help would be
greatly appreciated.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
May 11th, 2010 1:28am
Sorry, forgot:
Log Name: System
Source: LsaSrv
Date: 5/10/2010 3:35:02 PM
Event ID: 6037
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: BIZSRV.bizlogic.local
Description:
The program w3wp.exe, with the assigned process ID 4620, could not authenticate locally by using the target name HTTP/remote.bizlogic.org. The target name used is not valid. A target name should refer to one of the local computer names, for example, the DNS
host name.
Try a different target name.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="LsaSrv" />
<EventID Qualifiers="32768">6037</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-05-10T22:35:02.000Z" />
<EventRecordID>91353</EventRecordID>
<Channel>System</Channel>
<Computer>BIZSRV.bizlogic.local</Computer>
<Security />
</System>
<EventData>
<Data>4620</Data>
<Data>w3wp.exe</Data>
<Data>HTTP/remote.bizlogic.org</Data>
</EventData>
</Event>
Also here is the SPN info:
Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
C:\Windows\system32>setspn -l bizsrv
Registered ServicePrincipalNames for CN=BIZSRV,OU=Domain Controllers,DC=bizlogic
,DC=local:
exchangeAB/BIZSRV
exchangeAB/BIZSRV.bizlogic.local
exchangeMDB/BIZSRV.bizlogic.local
exchangeMDB/BIZSRV
exchangeRFR/BIZSRV.bizlogic.local
exchangeRFR/BIZSRV
SMTP/BIZSRV
SMTP/BIZSRV.bizlogic.local
SmtpSvc/BIZSRV
SmtpSvc/BIZSRV.bizlogic.local
TERMSRV/BIZSRV
TERMSRV/BIZSRV.bizlogic.local
ldap/BIZSRV.bizlogic.local/ForestDnsZones.bizlogic.local
ldap/BIZSRV.bizlogic.local/DomainDnsZones.bizlogic.local
Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/BIZSRV.bizlogic.local
NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/BIZSRV.bizlogic.local
DNS/BIZSRV.bizlogic.local
GC/BIZSRV.bizlogic.local/bizlogic.local
HOST/BIZSRV.bizlogic.local/BIZLOGIC
HOST/BIZSRV
HOST/BIZSRV.bizlogic.local
HOST/BIZSRV.bizlogic.local/bizlogic.local
E3514235-4B06-11D1-AB04-00C04FC2DCD2/baa2e563-3c12-48fb-aede-6fe2c37ba21
6/bizlogic.local
ldap/baa2e563-3c12-48fb-aede-6fe2c37ba216._msdcs.bizlogic.local
ldap/BIZSRV.bizlogic.local/BIZLOGIC
ldap/BIZSRV
ldap/BIZSRV.bizlogic.local
ldap/BIZSRV.bizlogic.local/bizlogic.local
Also here is my autodiscover test results - just for good measure:
Attempting to test Autodiscover for bryce@bizlogic.org
Successfully tested Autodiscover
Test Steps
Attempting each method of contacting the AutoDiscover Service
The AutoDiscover Service was successfully tested.
Test Steps
Attempting to test potential AutoDiscover URL
https://bizlogic.org/AutoDiscover/AutoDiscover.xml
Testing AutoDiscover URL succeeded
Test Steps
Attempting to resolve the host name bizlogic.org in DNS.
Host successfully resolved
Additional Details
IP(s) returned: 68.225.18.253
Testing TCP Port 443 on host bizlogic.org to ensure it is listening and open.
The port was opened successfully.
Testing SSL Certificate for validity.
The certificate passed all validation requirements.
Test Steps
Validating certificate name
Successfully validated the certificate name
Additional Details
Found hostname bizlogic.org in Certificate Subject Alternative Name entry
Validating certificate trust
The test passed with some warnings encountered. Please expand additional details.
Additional Details
Only able to build certificate chain when using the Root Certificate Update functionality from Windows Update. Your server may not be properly configured to send down the required intermediate certificates to complete the chain. Consult the certificate
installation instructions or FAQ's from your Certificate Authority for more information.
Testing certificate date to ensure validity
Date Validation passed. The certificate is not expired.
Additional Details
Certificate is valid: NotBefore = 4/28/2010 12:37:36 PM, NotAfter = 4/5/2011 8:47:08 PM"
Attempting to send AutoDiscover POST request to potential autodiscover URLs.
Successfully Retrieved AutoDiscover Settings by sending AutoDiscover POST.
Test Steps
Attempting to Retrieve XML AutoDiscover Response from url
https://bizlogic.org/AutoDiscover/AutoDiscover.xml for user
bryce@bizlogic.org
Successfully Retrieved AutoDiscover XML Response
Additional Details
AutoDiscover Account Settings
XML Response:
<?xml version="1.0"?>
<Autodiscover xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
<User>
<DisplayName>Bryce Osborne</DisplayName>
<LegacyDN>/o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Bryce</LegacyDN>
<DeploymentId>c52bcd12-e39f-4b95-b9c9-74da747d6d9a</DeploymentId>
</User>
<Account>
<AccountType>email</AccountType>
<Action>settings</Action>
<Protocol>
<Type>EXCH</Type>
<Server>BIZSRV.bizlogic.local</Server>
<ServerDN>/o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=BIZSRV</ServerDN>
<ServerVersion>720180F0</ServerVersion>
<MdbDN>/o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=BIZSRV/cn=Microsoft Private MDB</MdbDN>
<ASUrl>https://sites/EWS/Exchange.asmx</ASUrl>
<OOFUrl>https://sites/EWS/Exchange.asmx</OOFUrl>
<OABUrl>https://sites/OAB/5bdbf6b6-627d-4293-8118-50c4c4d77ff2/</OABUrl>
<UMUrl>https://sites/UnifiedMessaging/Service.asmx</UMUrl>
<Port>0</Port>
<DirectoryPort>0</DirectoryPort>
<ReferralPort>0</ReferralPort>
<PublicFolderServer>BIZSRV.bizlogic.local</PublicFolderServer>
<AD>BIZSRV.bizlogic.local</AD>
<EwsUrl>https://sites/EWS/Exchange.asmx</EwsUrl>
</Protocol>
<Protocol>
<Type>EXPR</Type>
<Server>remote.bizlogic.org</Server>
<ASUrl>https://autodiscover.bizlogic.org/EWS/Exchange.asmx</ASUrl>
<OOFUrl>https://autodiscover.bizlogic.org/EWS/Exchange.asmx</OOFUrl>
<OABUrl>https://autodiscover.bizlogic.org/oab/5bdbf6b6-627d-4293-8118-50c4c4d77ff2/</OABUrl>
<Port>0</Port>
<DirectoryPort>0</DirectoryPort>
<ReferralPort>0</ReferralPort>
<SSL>On</SSL>
<AuthPackage>Basic</AuthPackage>
<EwsUrl>https://autodiscover.bizlogic.org/EWS/Exchange.asmx</EwsUrl>
</Protocol>
<Protocol>
<Type>WEB</Type>
<Port>0</Port>
<DirectoryPort>0</DirectoryPort>
<ReferralPort>0</ReferralPort>
<External>
<OWAUrl AuthenticationMethod="Fba">https://remote.bizlogic.org/owa/</OWAUrl>
<Protocol>
<Type>EXPR</Type>
<ASUrl>https://autodiscover.bizlogic.org/EWS/Exchange.asmx</ASUrl>
</Protocol>
</External>
<Internal>
<OWAUrl AuthenticationMethod="Basic, Fba">https://sites/owa/</OWAUrl>
<Protocol>
<Type>EXCH</Type>
<ASUrl>https://sites/EWS/Exchange.asmx</ASUrl>
</Protocol>
</Internal>
</Protocol>
</Account>
</Response>
</Autodiscover>
I just ran this test the other day, see my post below and all was OK not sure why that changed.
http://social.technet.microsoft.com/Forums/en-US/exchangesvrclients/thread/3f53e8be-8f06-4012-a822-7e4e6ed4fd48/
May 11th, 2010 1:45am
Hi,
We have similar thread,please have a look and then check the SPN that you have registered.
LsaSrv Event ID: 6037 Error on Exchange 2007 CAS / Hub server. Multiple
http://social.technet.microsoft.com/Forums/en-US/exchangesvrmigration/thread/ad803427-de20-4911-b4cf-67aeec11c816
Besides, I recommend you to run ExBPA to ensure that everything is working properly.
Regards,
Xiu
Free Windows Admin Tool Kit Click here and download it now
May 11th, 2010 6:26am
Hi,
We have similar thread,please have a look and then check the SPN that you have registered.
LsaSrv Event ID: 6037 Error on Exchange 2007 CAS / Hub server. Multiple
http://social.technet.microsoft.com/Forums/en-US/exchangesvrmigration/thread/ad803427-de20-4911-b4cf-67aeec11c816
Besides, I recommend you to run ExBPA to ensure that everything is working properly.
Regards,
Xiu
Thanks Posted SPN results above but here they are again:
C:\Windows\system32>setspn -l bizsrv
Registered ServicePrincipalNames for CN=BIZSRV,OU=Domain Controllers,DC=bizlogic
,DC=local:
exchangeAB/BIZSRV
exchangeAB/BIZSRV.bizlogic.local
exchangeMDB/BIZSRV.bizlogic.local
exchangeMDB/BIZSRV
exchangeRFR/BIZSRV.bizlogic.local
exchangeRFR/BIZSRV
SMTP/BIZSRV
SMTP/BIZSRV.bizlogic.local
SmtpSvc/BIZSRV
SmtpSvc/BIZSRV.bizlogic.local
TERMSRV/BIZSRV
TERMSRV/BIZSRV.bizlogic.local
ldap/BIZSRV.bizlogic.local/ForestDnsZones.bizlogic.local
ldap/BIZSRV.bizlogic.local/DomainDnsZones.bizlogic.local
Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/BIZSRV.bizlogic.local
NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/BIZSRV.bizlogic.local
DNS/BIZSRV.bizlogic.local
GC/BIZSRV.bizlogic.local/bizlogic.local
HOST/BIZSRV.bizlogic.local/BIZLOGIC
HOST/BIZSRV
HOST/BIZSRV.bizlogic.local
HOST/BIZSRV.bizlogic.local/bizlogic.local
E3514235-4B06-11D1-AB04-00C04FC2DCD2/baa2e563-3c12-48fb-aede-6fe2c37ba21
6/bizlogic.local
ldap/baa2e563-3c12-48fb-aede-6fe2c37ba216._msdcs.bizlogic.local
ldap/BIZSRV.bizlogic.local/BIZLOGIC
ldap/BIZSRV
ldap/BIZSRV.bizlogic.local
ldap/BIZSRV.bizlogic.local/bizlogic.local
Thank you
May 11th, 2010 7:01am
BPA shows a Certificate SANS mismatch error:
The subject alternative name (SAN) of SSL certificate for https://sites/Autodiscover/Autodiscover.xml does not appear to match the host address. Host address: sites. Current SAN: DNS Name=remote.bizlogic.org, DNS Name=www.remote.bizlogic.org, DNS Name=mail.bizlogic.org,
DNS Name=bizsrv.bizlogic.local, DNS Name=autodiscover.bizlogic.org, DNS Name=bizlogic.org.
Free Windows Admin Tool Kit Click here and download it now
May 14th, 2010 4:35am
Hi,
Have you checked the host address?
Please try to use https://sites/autodiscover/autodiscover.xml from Internet Explorer and then check if any error would be occur.
Regards,
Xiu
May 17th, 2010 6:23am
Yes, I get a certificate warning:
The security certificate presented by this website was issued for a different website's address.
If I contuine I get the following:
<?xml version="1.0" encoding="utf-8"
?>
-
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
-
<Response>
-
<Error Time="05:33:12.8996322"
Id="1112141116">
<ErrorCode>600</ErrorCode>
<Message>Invalid Request</Message>
<DebugData
/>
</Error>
</Response>
</Autodiscover>
and if I veiw which cert it is using, it shows my UCC cert
Free Windows Admin Tool Kit Click here and download it now
May 17th, 2010 3:30pm