You receive a "0xc00e0014 MQ_ERROR_ILLEGAL_QUEUE_PATHNAME" error message when you try to send messages by using Message Queuing (839927)


The information in this article applies to:

  • Microsoft Message Queuing 2.0

SYMPTOMS

When there is a time difference that is greater than 45 seconds between the clock of the domain controller that is running as the Message Queue Information Store (MQIS) and the clock of the client that is sending the messages, you may receive the following error message. This problem occurs when you try to send messages.
0xc00e0014 MQ_ERROR_ILLEGAL_QUEUE_PATHNAME

CAUSE

The Kerberos authentication technique fails because of the clock drift between the Message Queuing client and its domain controller. Any clock drift that is greater than 45 seconds causes authentication to fail. Authentication is required so that the domain controller can resolve the path for the client.

RESOLUTION

To resolve this problem, synchronize the clock of the client that is sending the messages and the clock of the domain controller.

MORE INFORMATION

The Kerberos version 5 authentication protocol provides a mechanism for authentication and for mutual authentication for the following:
  • Between a client and a server
  • Between one server and another server
Microsoft Windows Server 2003 implements extensions for the protocol that permit initial authentication by using public key certificates on smart cards. The Kerberos Key Distribution Center (KDC) uses the Active Directory directory service database of the domain as its security account database. Active Directory is required for default NT LAN Manager (NTLM) and Kerberos implementations.

REFERENCES

For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

216734 How to configure an authoritative time server in Windows 2000

258059 How to synchronize the time on a Windows 2000-based computer in a Windows NT 4.0 domain


For additional information, visit the following Microsoft Web sites:

The Windows Time service

http://www.microsoft.com/technet/prodtechnol/Windows2000Pro/maintain/w2kmngd/16_2kwts.mspx

Using Windows Server 2003 in a managed environment

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03mngd/26_s3wts.mspx

Kerberos authentication technical reference

http://technet2.microsoft.com/windowsserver/en/library/B748FB3F-DBF0-4B01-9B22-BE14A8B4AE101033.mspx

Modification Type:MajorLast Reviewed:6/20/2006
Keywords:ATdownload kbActiveDirectory kbAuthentication kbprb KB839927 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.