SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Troubleshooting Cannot Generate SSPI Context Errors


Troubleshooting Cannot Generate SSPI Context Errors

Author
Message
chay-330396
chay-330396
Grasshopper
Grasshopper (11 reputation)Grasshopper (11 reputation)Grasshopper (11 reputation)Grasshopper (11 reputation)Grasshopper (11 reputation)Grasshopper (11 reputation)Grasshopper (11 reputation)Grasshopper (11 reputation)

Group: General Forum Members
Points: 11 Visits: 1

Hi,

I've been experiencing this problem for a long time and this is the first article or reference I have found that addresses it. We have SQL Server 2000 sp3 running on Windows Server 2003 at a client's site, and a client/server application written in VB6 that accesses it, and we get this error intermittently. We've just been telling them to log off and log on again! I'll try the suggestion in this article.

Daniel


MudLuck
MudLuck
SSC Veteran
SSC Veteran (255 reputation)SSC Veteran (255 reputation)SSC Veteran (255 reputation)SSC Veteran (255 reputation)SSC Veteran (255 reputation)SSC Veteran (255 reputation)SSC Veteran (255 reputation)SSC Veteran (255 reputation)

Group: General Forum Members
Points: 255 Visits: 519

Chad,

thanks for the article, I as well have seen this error and everytime I try to research it all I find are documents from the perspective of Kerbos in general, or from the point of view of a Network administrator (which I am not). You elluded to part of the answer in your article and I have re-printed the quote below

"(see KLIST and KERBTRAY.EXE Windows 2000 Resource Kit utilities to view current tickets). "

My question is how do I know if a connection is comming in as kerbos or is demoting to NTLM. What was your perspective on using Klist or the KerbTray.exe applications to view Kerbos connections. How did you view NTLM conections? From this where there any tricks learned? Ofcourse I'm off to try myself, but I thought I would bring it up as a possible add in to the next revision of this Doc (if any). Ideally I would like to know how to check each of the three types of connections so that I might know definitely how my connection are occuring to the database.

The 3 types

1. NTLM over Named Pipes (not using SSPI)

2. NTLM over TCP-IP sockets via SSPI

3. Kerberos over TCP-IP sockets via SSPI

Thanks,

Mudluck





Roger Hindin
Roger Hindin
Forum Newbie
Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)Forum Newbie (5 reputation)

Group: General Forum Members
Points: 5 Visits: 1
I'm also getting the SSPI Context error due to changing the system time on the server for test purposes. Is there really no way of doing this without getting an error? How do you simulate the passing of time when testing?
Mister Sachmo
Mister Sachmo
SSC-Enthusiastic
SSC-Enthusiastic (126 reputation)SSC-Enthusiastic (126 reputation)SSC-Enthusiastic (126 reputation)SSC-Enthusiastic (126 reputation)SSC-Enthusiastic (126 reputation)SSC-Enthusiastic (126 reputation)SSC-Enthusiastic (126 reputation)SSC-Enthusiastic (126 reputation)

Group: General Forum Members
Points: 126 Visits: 152
I was able to get around this issue by setting up an alias for the server giving me trouble in the Client Network Utility.
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search