Help! I screwed up big time. While trying to obtain the kerberos keys so i could decode some kerberos packets with wireshark, I inadvertently changed some internal passwords and I have no idea how to fix it. I am keenly aware of how stupid this was.
I used the ktpass app to and generate a keytab file, and apparently this also reset some internal password. Now I can no longer authenticate against the domain controller, and I get the event ID 4, with an message of:
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server SERVER$. The target name used was INET\SSComPlus_be1. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (INET.PRIV), and the client realm. Please contact your system administrator.
Can anyone help me here?