Questions tagged [spn]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
125 views

SSIS 2017 KerberosSupport - Double Hop Issue

I am having an issue with what appears to be a kerberos double hop issue with SSIS 2017. The setup consists of a backend database cluster servers (DBSERVER01\02) an Application\SSIS server (...
2
votes
0answers
150 views

Enabling Kerberos for Microsoft SQL Server Reporting Services

I am trying to enable Kerberos for MS SQL Server Reporting Services. I am fairly familiar with Windows security and how it works. However, I am new to Scale Out Deployment and Clustering of Windows ...
0
votes
1answer
496 views

How to get Kerberos working against a named SQL Server instance in Power BI Report Server?

I have a Power BI Report Server working perfectly connecting to SQL Server machines with a default instance only. I can also connect to SSAS named instances with the proper SPNs and by allowing ...
2
votes
1answer
692 views

SQL Server - register Service Principle Name without service restart?

I have a live SQL Server 2012 environment that had no SPN registered - this has previously not been an issue as Kerberos authentication wasn't required. But now it is required. I have configured ...
0
votes
0answers
929 views

Why SQL Server Kerberos authentication does not work?

I am trying to find out why there is no Kerberos authentication on my SQL instance : SELECT COUNT (auth_scheme) as nb, auth_scheme --net_transport, client_net_address FROM sys.dm_exec_connections ...
2
votes
0answers
866 views

SQL Server SPNs not being created, state: 43

I'm trying to configure a SQL Server 2014 (12.0.5000.0) instance to use a regular user account in AD and Kerberos auth. During installation the default accounts (local system ones) were used, and the ...
0
votes
1answer
678 views

cannot generate sspi - None of Solution worked!

I am receiving "cannot generate sspi" error when I try to connect a sql instance remotely. I suspected the issue might be with spn and verified that spn was registered properly on the service account(...
8
votes
2answers
10k views

What should my SPN entries look like for each SQL instance?

I'm finding contradictory information for how exactly to format SPNs (Service Principle Names) to get the proper Kerberos connections, and how many I need for each SQL instance. This 2017 MS ...
0
votes
0answers
434 views

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. not consistent

We have seen this problem before and fixed it by looking at the KERBOS configuration program. But now I have something odd. Both I and another DBA have the same SysAdmin perms to both boxes. But when ...
3
votes
1answer
2k views

set SPN on SQL cluster

I have a question about how to manually set SPN for using Kerberos authentication on a SQL cluster. Do I set one SPN on the clustername or one on each node? I also have a default named instance, do ...
1
vote
1answer
98 views

SPN clarifications

We are getting below issue : ‘SQL Server cannot authenticate using Kerberos because the Service Principal Name (SPN) is missing, misplaced, or duplicated.’ I found an article how to get it fixed....
1
vote
1answer
317 views

Connection to database causes SSPI context error

I have migrated a SQL server from another server box that was decommissioned. They have the same name and also same IP address. However, when I connect to the server from an application using trusted ...
1
vote
1answer
621 views

Whay does the SQL Server Service account has the “”Impersonate a client after authentication" Right?

Our database is running on SQL Server 2008 hosted on a Windows 2008 Server. We have found that the security policy “impersonate a Client after authentication” is enabled for the SQL Server service ...
0
votes
2answers
3k views

The SQL Server Network Interface library could not deregister the Service Principal Name

After windows patching (windows 2008 R2 , SQL Server 2012 Sp2). I could not start SQL Server Service . I get error 1067 and this from the error log* The SQL Server Network Interface library could not ...
0
votes
1answer
878 views

Only local administrators can connect remotely

I'm facing a problem that when I try to connect to the SQL Express instance from client to server. The Server logs an error: SSPI handshake failed with error code 0x8009030c, state 14 while ...
0
votes
1answer
74 views

Server 2012 Linked Server From An Instance

I have 3 SQL Server 2012 Instances, 2 on SiteA on the same server SiteAServer. I have 1 on SiteB on server SiteBServer. SiteADefaultInstance, SiteASecondInstance SiteBDefaultInstance ...
0
votes
0answers
215 views

SSRS 2008R2 SQL Service Account Connection Issue

In our SSRS report manager page we get the below error on the Datasources. This all worked fine previously and seems to suddenly have stopped working. I have no idea what the issue could be. All SPN ...
3
votes
2answers
4k views

How to prevent SQL Server service account from registering / deregistering SPN?

The service account is a domain account. It is not a domain admin (nor is it a member of any group that is a domain admin). It has neither "write servicePrincipalName" nor "Write public information" ...