Questions tagged [spn]
The spn tag has no usage guidance.
24
questions
2
votes
0
answers
80
views
SQL Server could not register the Service Principal Name (SPN) ... without membership in Domain Admins
A separate domain account was created for the database engine service of a SQL Server Failover Cluster Instance. Server Principal Names (SPNs) were added manually via the SetSPN.exe command line tool.
...
- 865
1
vote
0
answers
78
views
Windows authentication on remote client accessing SQL Server 2022 with SSMS [duplicate]
I have installed SQL Server 2022 on Windows Server 2019 Datacenter, and applied the March SQL Server 2022 Cumulative Updates. Also installed on the server is SSMS 18.12.1 and 19.0.2.
On a remote ...
- 11
1
vote
2
answers
106
views
Registration of SPNs for Availability Groups
Manually registering SPNs for Availability group -
Do I need to register SPNs for the AG Listener as well as the individual nodes, for both the instance name and the listening ports for the managed ...
- 287
0
votes
1
answer
105
views
In what circumstances do SPNs get created automatically?
I'm trying to solve some mystery in two of my environments. Both are SQL 2019 deployments, however one has Kerberos configured (i.e. SPNs are registered for the instance and port), while the other ...
- 287
2
votes
1
answer
285
views
Restore over dns alias fails with Operating system error 1326(The user name or password is incorrect.)
following configuration:
SQL Server is running on server.domain.intra with an gMSA.
DNS alias: server-db-dev.domain.intra
gMSA Permissions on backup share: Full Control
SPNs set for gMSA:
MSSQLSvc/...
- 23
0
votes
1
answer
1k
views
Can an AD service account host SPNs for multiple SQL Instances?
Trying to set up Kerberos Authentication between two linked server to get past the double-hop issue.
Server A is in a domain with several other SQL Servers. All SQL instances on all servers in this ...
- 355
1
vote
1
answer
1k
views
What is Accepted NTLM SPNs
In SQL Server Configuration Manager on the Advanced tab in TCP/IP Protocol properties box there is an option Accepted NTLM SPNs. What is the use of that option and how it can be used?
- 11
1
vote
0
answers
604
views
SSIS 2017 KerberosSupport - Double Hop Issue
I am having an issue with what appears to be a kerberos double hop issue with SSIS 2017.
The setup consists of a backend database cluster servers (DBSERVER01\02) an Application\SSIS server (...
- 11
2
votes
0
answers
740
views
Enabling Kerberos for Microsoft SQL Server Reporting Services
I am trying to enable Kerberos for MS SQL Server Reporting Services. I am fairly familiar with Windows security and how it works. However, I am new to Scale Out Deployment and Clustering of Windows ...
- 21
0
votes
1
answer
1k
views
How to get Kerberos working against a named SQL Server instance in Power BI Report Server?
I have a Power BI Report Server working perfectly connecting to SQL Server machines with a default instance only. I can also connect to SSAS named instances with the proper SPNs and by allowing ...
- 1,973
2
votes
1
answer
4k
views
SQL Server - register Service Principle Name without service restart?
I have a live SQL Server 2012 environment that had no SPN registered - this has previously not been an issue as Kerberos authentication wasn't required. But now it is required.
I have configured ...
- 1,414
0
votes
0
answers
1k
views
Why SQL Server Kerberos authentication does not work?
I am trying to find out why there is no Kerberos authentication on my SQL instance :
SELECT COUNT (auth_scheme) as nb, auth_scheme --net_transport, client_net_address
FROM sys.dm_exec_connections
...
- 303
2
votes
0
answers
2k
views
SQL Server SPNs not being created, state: 43
I'm trying to configure a SQL Server 2014 (12.0.5000.0) instance to use a regular user account in AD and Kerberos auth. During installation the default accounts (local system ones) were used, and the ...
- 121
0
votes
1
answer
826
views
cannot generate sspi - None of Solution worked!
I am receiving "cannot generate sspi" error when I try to connect a sql instance remotely. I suspected the issue might be with spn and verified that spn was registered properly on the service account(...
10
votes
3
answers
20k
views
What should my SPN entries look like for each SQL instance?
I'm finding contradictory information for how exactly to format SPNs (Service Principle Names) to get the proper Kerberos connections, and how many I need for each SQL instance.
This 2017 MS document ...
- 9,752
4
votes
1
answer
4k
views
set SPN on SQL cluster
I have a question about how to manually set SPN for using Kerberos authentication on a SQL cluster.
Do I set one SPN on the clustername or one on each node?
I also have a default named instance, do ...
- 55
2
votes
1
answer
181
views
SPN clarifications
We are getting below message:
‘SQL Server cannot authenticate using Kerberos because the Service
Principal Name (SPN) is missing, misplaced, or duplicated.’
I found an article on how to get it ...
- 1,580
1
vote
1
answer
412
views
Connection to database causes SSPI context error
I have migrated a SQL server from another server box that was decommissioned. They have the same name and also same IP address. However, when I connect to the server from an application using trusted ...
- 11
1
vote
1
answer
2k
views
Whay does the SQL Server Service account has the ""Impersonate a client after authentication" Right?
Our database is running on SQL Server 2008 hosted on a Windows 2008 Server. We have found that the security policy “impersonate a Client after authentication” is enabled for the SQL Server service ...
- 13
0
votes
2
answers
6k
views
The SQL Server Network Interface library could not deregister the Service Principal Name
After windows patching (windows 2008 R2 , SQL Server 2012 Sp2). I could not start SQL Server Service . I get error 1067 and this from the error log* The SQL Server Network Interface library could not ...
- 167
0
votes
1
answer
1k
views
Only local administrators can connect remotely
I'm facing a problem that when I try to connect to the SQL Express instance from client to server. The Server logs an error:
SSPI handshake failed with error code 0x8009030c, state 14 while
...
- 1,009
0
votes
1
answer
84
views
Server 2012 Linked Server From An Instance
I have 3 SQL Server 2012 Instances, 2 on SiteA on the same server SiteAServer. I have 1 on SiteB on server SiteBServer.
SiteADefaultInstance, SiteASecondInstance
SiteBDefaultInstance
...
0
votes
0
answers
232
views
SSRS 2008R2 SQL Service Account Connection Issue
In our SSRS report manager page we get the below error on the Datasources. This all worked fine previously and seems to suddenly have stopped working. I have no idea what the issue could be.
All SPN ...
- 1,394
3
votes
2
answers
5k
views
How to prevent SQL Server service account from registering / deregistering SPN?
The service account is a domain account. It is not a domain admin (nor is it a member of any group that is a domain admin). It has neither "write servicePrincipalName" nor "Write public information" ...
- 1,236