SCROLL
Среднее время на прочтение: 3 мин.

MSSQL Server ошибка при подключении — The target principal name is incorrect. Cannot generate SSPI context.

В один момент не смог подключится к своему MSSQL Server используя Windows Authentication, получал ошибку — The target principal name is incorrect. Cannot generate SSPI context.

В логах видно что не удается зарегистрировать Service Principal Name (SPN) службы SQL Server:

Plain text
Copy to clipboard
Open code in new window
EnlighterJS 3 Syntax Highlighter
Date 1/27/2023 4:31:22 PM
Log SQL Server (Current - 1/27/2023 5:12:00 PM)
Source Server
Message
SQL Server is attempting to register a Service Principal Name (SPN) for the SQL Server service. Kerberos authentication will not be possible until a SPN is registered for the SQL Server service. This is an informational message. No user action is required.
Date 1/27/2023 4:31:22 PM
Log SQL Server (Current - 1/27/2023 5:12:00 PM)
Source Server
Message
The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/n******4005.example.local:N******4005 ] for the SQL Server service. Windows return code: 0x21c7, state: 15. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies and if the SPN has not been manually registered.
Date 1/27/2023 4:31:22 PM Log SQL Server (Current - 1/27/2023 5:12:00 PM) Source Server Message SQL Server is attempting to register a Service Principal Name (SPN) for the SQL Server service. Kerberos authentication will not be possible until a SPN is registered for the SQL Server service. This is an informational message. No user action is required. Date 1/27/2023 4:31:22 PM Log SQL Server (Current - 1/27/2023 5:12:00 PM) Source Server Message The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/n******4005.example.local:N******4005 ] for the SQL Server service. Windows return code: 0x21c7, state: 15. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies and if the SPN has not been manually registered.
Date        1/27/2023 4:31:22 PM
Log        SQL Server (Current - 1/27/2023 5:12:00 PM)
Source        Server
Message
SQL Server is attempting to register a Service Principal Name (SPN) for the SQL Server service. Kerberos authentication will not be possible until a SPN is registered for the SQL Server service. This is an informational message. No user action is required.

Date        1/27/2023 4:31:22 PM
Log        SQL Server (Current - 1/27/2023 5:12:00 PM)
Source        Server
Message
The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/n******4005.example.local:N******4005 ] for the SQL Server service. Windows return code: 0x21c7, state: 15. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies and if the SPN has not been manually registered.

 

Быстро диагностировать и исправить проблемы можно утилитой — Microsoft Kerberos Configuration Manager (KCM).

 

На компьютере, на котором возникла проблема с подключением, скачиваем и устанвливаем Kerberos Configuration Manager.

Скачать можно с официального сайта — https://www.microsoft.com/en-us/download/details.aspx?id=39046

 

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

JUQwJTlEJUQwJUIwJUQwJUI2JUQwJUI4JUQwJUJDJUQwJUIwJUQwJUI1JUQwJUJDJUMyJUEwQ29ubmVjdC4lMjAlRDAlOUQlRDAlQjAlMjAlRDElODQlRDAlQkUlRDElODAlRDAlQkMlRDAlQjUlMjAlRDAlQkYlRDAlQkUlRDAlQjQlRDAlQkElRDAlQkIlRDElOEUlRDElODclRDAlQjUlRDAlQkQlRDAlQjglRDElOEYlMjAlRDAlQkUlRDElODElRDElODIlRDAlQjAlRDAlQjIlRDAlQkIlRDElOEYlRDAlQjUlRDAlQkMlMjAlRDAlQjglRDAlQkMlRDElOEYlMjAlRDElODElRDAlQjUlRDElODAlRDAlQjIlRDAlQjUlRDElODAlRDAlQjAlMjAlRDAlQjglMjAlRDElODMlRDElODclRDAlQjUlRDElODIlRDAlQkQlRDElOEIlRDAlQjUlMjAlRDAlQjQlRDAlQjAlRDAlQkQlRDAlQkQlRDElOEIlRDAlQjUlMkMlMjAlRDAlQkYlRDElODMlRDElODElRDElODIlRDElOEIlRDAlQkMlRDAlQjgu

 

После того, как KCM завершит извлечение необходимой информации, переходим на вкладку SPN. Если KCM найдет проблемы, то нам они будут отображены

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

 

ПОНРАВИЛАСЬ ИЛИ ОКАЗАЛАСЬ ПОЛЕЗНОЙ СТАТЬЯ, ПОДДЕРЖИ АВТОРА ДОНАТОМ

Обсуждение

0 комментариев

Нет комментариев.