Cannot Generate SSPI Context on some IPs but not others

  • I am running into a problem that maybe some of you guys can help me with. I have a server running SQL 2005, let's call it My2005Server. I am trying to connect to server running SQL 2000, My2000Server, through the SQL Server Management Studio. I am attempting to connect by server name and using Windows Authentication. Unfortunately I am getting the dreaded "Cannot Generate SSPI Context" error message.

    Further research revealed the following:

    My2000Server is running Windows 2003 Server as it's OS. It has 2 network adapters, and each adapter has two IP addresses. For example purposes:

    Adapter 1

    123.123.123.1

    123.123.123.2

    Adapter 2

    123.123.123.3

    123.123.123.4

    Now get this--if I go into My2005Server's SQL Management Studio and attempt to connect to My2000Server by IP address, if I use 123.123.123.1 or 123.123.123.3 with Windows Authentication, I get the "Cannot Generate SSPI Context" error.

    If I use 123.123.123.2 or 123.123.123.4 with Windows Authentication, I connect with no problems.

    I *think* all of the DNS settings are correct. If I ping -a My2000Server, it resolves to the FQDN My2000Server.Mydoman.com.

    Also, when I ping My2000Server, half the time it resolves to 123.123.123.1, and half the time it resolves to 123.123.123.3.

    So I then checked the ErrorLog on My2000Server to see what IPs the server is listening for, and I found the following entries:

    2011-03-08 21:20:41.79 server SQL server listening on 123.123.123.1: 1433.

    2011-03-08 21:20:41.79 server SQL server listening on 123.123.123.2: 1433.

    2011-03-08 21:20:41.79 server SQL server listening on 123.123.123.3: 1433.

    2011-03-08 21:20:41.79 server SQL server listening on 123.123.123.4: 1433.

    2011-03-08 21:20:41.81 server SQL server listening on 127.0.0.1: 1433.

    I have absolutely no idea what to try next. Does anyone have any suggestions? Ultimately I want to be able to connect to My2000Server from My2005Server by server name using Windows Authentication.

    Thanks!

  • This is a Kerbosis error message...

    Wayne
    Microsoft Certified Master: SQL Server 2008
    Author - SQL Server T-SQL Recipes


    If you can't explain to another person how the code that you're copying from the internet works, then DON'T USE IT on a production system! After all, you will be the one supporting it!
    Links:
    For better assistance in answering your questions
    Performance Problems
    Common date/time routines
    Understanding and Using APPLY Part 1 & Part 2

  • WayneS (4/26/2011)


    This is a Kerbosis error message...

    Hi!

    I'm not sure what that means, or how to correct my error.

    Thanks!

  • Try this article and see if it helps.

    http://support.microsoft.com/kb/811889

    Jason...AKA CirqueDeSQLeil
    _______________________________________________
    I have given a name to my pain...MCM SQL Server, MVP
    SQL RNNR
    Posting Performance Based Questions - Gail Shaw[/url]
    Learn Extended Events

  • SQLRNNR (4/26/2011)


    Try this article and see if it helps.

    http://support.microsoft.com/kb/811889

    Hi!

    Yes, I have read that article and tried everything that was suggested. Please believe me when I tell you I've spent over a week researching the issue on Google and trying suggestions from lots of sites.

    All of the procedures assume you have a machine with a single IP address. My machine has 4 IP addresses on 2 network adapters. Like I said, some IPs work, others don't. Which is why I think my issue is more complicated and have been having trouble tracking down a solution.

  • The error message is not due to the IP though. It is a kerberos issue which is an authentication protocol in active directory. You have already done everything recommended in that article then?

    Jason...AKA CirqueDeSQLeil
    _______________________________________________
    I have given a name to my pain...MCM SQL Server, MVP
    SQL RNNR
    Posting Performance Based Questions - Gail Shaw[/url]
    Learn Extended Events

Viewing 6 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply