The Security Account Manager failed a KDC request in an unexpected way. The error is in the data field. The account name was username@MYDOMAIN.LOCAL and lookup type 0x28.

There are multiple accounts with name MSSQLSvc/venus.partnershipassurance.int:3038 of type DS_SERVICE_PRINCIPAL_NAME.

The currently selected KDC certificate was once valid, but now is invalid and no suitable replacement was found. Smartcard logon may not function correctly if this problem is not remedied. Have the system administrator check on the state of the domain's public key infrastructure. The chain status is in the error data.

The KDC received invalid messages of type changepassword.