Kerberos
-
Could not Register Service Principal Name
Have you ever seen the error below in your SQL Server log about the Service Principal Name shortly after startup? You’ll actually see two of them and you can see the difference between them in the screen shot, but here is the text. The SQL Server Network Interface library could not register the Service Principal…
-
Kerberos Configuration Manager’s Nasty Bug
The Kerberos Configuration Manager is a really handy tool that can make configuring Kerberos a much easier task, but it’s got a nasty little bug. Configuring Kerberos can be tricky. In what way you ask? Here is a short list of just some of the things you have to consider. What is my SPN supposed…
-
SSPI Handshake Failed
A fellow community member sent me an email saying he was having trouble authenticating with Kerberos. Here is the error he was receiving: SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of…
-
Configure Kerberos for SQL with Virtual Accounts
At a conference recently I had someone ask how they would configure Kerberos for accounts that look like “NT Service\MSSQLServer” or “NT Service\MSSQL$MyInstance”. Please note that these are NOT the built-in system accounts, even though they look similar. The system accounts are “Local System”, “Local Service”, and “Network Service”. The “NT Service” accounts are virtual…
-
Error Authenticating Proxy | SQL and UPNs
Have you ever had an error when using a SQL Server Proxy Account? I ran across a misleading error. Let me qualify that a little. It wasn’t misleading in the sense of it saying one thing and meaning another. It was misleading because it’s one of those errors you see for multiple things and I…