Skip to main content

Questions tagged [spn]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
453 views

Connection to database causes SSPI context error

I have migrated a SQL server from another server box that was decommissioned. They have the same name and also same IP address. However, when I connect to the server from an application using trusted ...
0 votes
0 answers
216 views

Kerberos client authentication times out with SQL error 87

Apologies for the length of this but I'm app developer, not a SQL DBA nor network Admin, so I'm out of my area and just wanted to be sure I documented everything as well as I could. This is a problem ...
2 votes
0 answers
2k views

SQL Server could not register the Service Principal Name (SPN) ... without membership in Domain Admins

A separate domain account was created for the database engine service of a SQL Server Failover Cluster Instance. Server Principal Names (SPNs) were added manually via the SetSPN.exe command line tool. ...
1 vote
0 answers
79 views

Windows authentication on remote client accessing SQL Server 2022 with SSMS [duplicate]

I have installed SQL Server 2022 on Windows Server 2019 Datacenter, and applied the March SQL Server 2022 Cumulative Updates. Also installed on the server is SSMS 18.12.1 and 19.0.2. On a remote ...
1 vote
2 answers
467 views

Registration of SPNs for Availability Groups

Manually registering SPNs for Availability group - Do I need to register SPNs for the AG Listener as well as the individual nodes, for both the instance name and the listening ports for the managed ...
0 votes
1 answer
619 views

In what circumstances do SPNs get created automatically?

I'm trying to solve some mystery in two of my environments. Both are SQL 2019 deployments, however one has Kerberos configured (i.e. SPNs are registered for the instance and port), while the other ...
10 votes
3 answers
23k views

What should my SPN entries look like for each SQL instance?

I'm finding contradictory information for how exactly to format SPNs (Service Principle Names) to get the proper Kerberos connections, and how many I need for each SQL instance. This 2017 MS document ...
2 votes
1 answer
522 views

Restore over dns alias fails with Operating system error 1326(The user name or password is incorrect.)

following configuration: SQL Server is running on server.domain.intra with an gMSA. DNS alias: server-db-dev.domain.intra gMSA Permissions on backup share: Full Control SPNs set for gMSA: MSSQLSvc/...
0 votes
1 answer
2k views

Can an AD service account host SPNs for multiple SQL Instances?

Trying to set up Kerberos Authentication between two linked server to get past the double-hop issue. Server A is in a domain with several other SQL Servers. All SQL instances on all servers in this ...
2 votes
1 answer
2k views

What is Accepted NTLM SPNs

In SQL Server Configuration Manager on the Advanced tab in TCP/IP Protocol properties box there is an option Accepted NTLM SPNs. What is the use of that option and how it can be used?
2 votes
1 answer
206 views

SPN clarifications

We are getting below message: ‘SQL Server cannot authenticate using Kerberos because the Service Principal Name (SPN) is missing, misplaced, or duplicated.’ I found an article on how to get it ...
1 vote
0 answers
656 views

SSIS 2017 KerberosSupport - Double Hop Issue

I am having an issue with what appears to be a kerberos double hop issue with SSIS 2017. The setup consists of a backend database cluster servers (DBSERVER01\02) an Application\SSIS server (...
2 votes
0 answers
835 views

Enabling Kerberos for Microsoft SQL Server Reporting Services

I am trying to enable Kerberos for MS SQL Server Reporting Services. I am fairly familiar with Windows security and how it works. However, I am new to Scale Out Deployment and Clustering of Windows ...
0 votes
1 answer
2k views

How to get Kerberos working against a named SQL Server instance in Power BI Report Server?

I have a Power BI Report Server working perfectly connecting to SQL Server machines with a default instance only. I can also connect to SSAS named instances with the proper SPNs and by allowing ...
2 votes
1 answer
5k views

SQL Server - register Service Principle Name without service restart?

I have a live SQL Server 2012 environment that had no SPN registered - this has previously not been an issue as Kerberos authentication wasn't required. But now it is required. I have configured ...
2 votes
0 answers
2k views

SQL Server SPNs not being created, state: 43

I'm trying to configure a SQL Server 2014 (12.0.5000.0) instance to use a regular user account in AD and Kerberos auth. During installation the default accounts (local system ones) were used, and the ...
1 vote
2 answers
7k views

The SQL Server Network Interface library could not deregister the Service Principal Name

After windows patching (windows 2008 R2 , SQL Server 2012 Sp2). I could not start SQL Server Service . I get error 1067 and this from the error log* The SQL Server Network Interface library could not ...
0 votes
0 answers
2k views

Why SQL Server Kerberos authentication does not work?

I am trying to find out why there is no Kerberos authentication on my SQL instance : SELECT COUNT (auth_scheme) as nb, auth_scheme --net_transport, client_net_address FROM sys.dm_exec_connections ...
0 votes
1 answer
877 views

cannot generate sspi - None of Solution worked!

I am receiving "cannot generate sspi" error when I try to connect a sql instance remotely. I suspected the issue might be with spn and verified that spn was registered properly on the service account(...
4 votes
1 answer
5k views

set SPN on SQL cluster

I have a question about how to manually set SPN for using Kerberos authentication on a SQL cluster. Do I set one SPN on the clustername or one on each node? I also have a default named instance, do ...
0 votes
1 answer
1k views

Only local administrators can connect remotely

I'm facing a problem that when I try to connect to the SQL Express instance from client to server. The Server logs an error: SSPI handshake failed with error code 0x8009030c, state 14 while ...
1 vote
1 answer
2k views

Whay does the SQL Server Service account has the ""Impersonate a client after authentication" Right?

Our database is running on SQL Server 2008 hosted on a Windows 2008 Server. We have found that the security policy “impersonate a Client after authentication” is enabled for the SQL Server service ...
0 votes
1 answer
85 views

Server 2012 Linked Server From An Instance

I have 3 SQL Server 2012 Instances, 2 on SiteA on the same server SiteAServer. I have 1 on SiteB on server SiteBServer. SiteADefaultInstance, SiteASecondInstance SiteBDefaultInstance ...
0 votes
0 answers
236 views

SSRS 2008R2 SQL Service Account Connection Issue

In our SSRS report manager page we get the below error on the Datasources. This all worked fine previously and seems to suddenly have stopped working. I have no idea what the issue could be. All SPN ...
3 votes
2 answers
5k views

How to prevent SQL Server service account from registering / deregistering SPN?

The service account is a domain account. It is not a domain admin (nor is it a member of any group that is a domain admin). It has neither "write servicePrincipalName" nor "Write public information" ...