This is my first time trying to configure kerberos. I need it for SQL Server.
I'm running SQL Server 2008 R2 on Windows 2008 R2 server.
I have an Active Directory account for SQL Server 2008 R2.
The account is delegated for kerberos.
The account is configured to start SQL Server services. This works without problems.
SPNs are registered for both netbios and FQDN for computername and also
The same SPNS are registered for the server and the account.
I mean, if I do
setspn -L domain\serviceaccount
setsqpn -Q MSSSQLSvc/Server.domain.local,
MSSQLSvc/Server:1433 MSSQLSvc/Server.domain.local MSSQLSvc/Server.domain.local:1433
When I run this query:
select auth_scheme from sys.dm_exec_connections where session_id=@@spid
...the result is NTLM.
This query I'm running from another server, connecting to the SQL Server that I need to use Kerberos on.
When I restart SQL Server services I see this error in the log:
The SQL Server Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service.
Error: 0x80090350, state: 4.Failure to register an SPN may cause integrated authentication to fall back to NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies.
Any idea what I'm missing?