Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Unable to generate SSPI context


Unable to generate SSPI context

Author
Message
shaun.stuart
shaun.stuart
SSCommitted
SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)

Group: General Forum Members
Points: 1998 Visits: 846
I've setup a new SQL server and am unable to connect to it with SSMS from any machine other than the local machine. When I do, I get an "Unable to generate SSPI context" error.

Googling this tells me the problem is usually that SQL was unable to register a server principle name. However, I do not believe this is the case for a couple reasons:

1. I'm running SQL under a domain account that all our other SQL Servers use, so I know that account should have permission to register an SPN.

2. The SQL Server log contains this entry:

"The SQL Server Network Interface library successfully registered the Service Principal Name (SPN) [ MSSQLSvc/<machinename>.<FQDN>:<instancename> ] for the SQL Server service."

On shutdown, there is a similar message saying the SPN was successfully unregistered.

3. setspn <serviceaccount> lists:

MSSQLSvc/<machinename>.<FQDN>:<instancename>

4. There are no entries in the Windows event logs regarding SPNs.

5. If I shutdown SQL, setspn no longer lists the entry for this server. When I restart SQL, it lists it again.

So all those things tell me SPNs are being registered OK. I have never changed the account SQL runs under, so I doubt there are duplicate SPNs.

Server OS is Windows Server 2008 R2, SQL is 2008 R2 Standard, SP1. There is only a named instance of SQL installed - no default instance.

Anyone have any ideas?

Shaun
Dev
Dev
SSCommitted
SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)

Group: General Forum Members
Points: 1944 Visits: 1598
Few Questions:
• Is it in Windows Authentication Mode or Mixed Mode?
• With which account you are trying to login? The same you used for installation or different?
• How did you configure the SQL services?
• Is Browser service running? (you said, it’s named instance so browser service should be up & running)

Dev

*** Open Network for Database Professionals ***
http://www.linkedin.com/in/devendrashirbad

shaun.stuart
shaun.stuart
SSCommitted
SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)

Group: General Forum Members
Points: 1998 Visits: 846
- Mixed mode

- Trying to log in with a different account than I installed with. Logging in with my network account, which is defined as sysadmin in sql server.

- Not sure what you mean. I configured everything via the install program, then used SQL Configuration manager later to add a trace flag (3226) and restarted the service for it to take effect.

- Browser service is running.

Based on your question, I tried connecting using the same account I installed it with and got the same error.
Dev
Dev
SSCommitted
SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)

Group: General Forum Members
Points: 1944 Visits: 1598
Did you try ‘sa’ login? I just want to make sure that you can make one successful login. Then we can focus on login specific issue.

Dev

*** Open Network for Database Professionals ***
http://www.linkedin.com/in/devendrashirbad

shaun.stuart
shaun.stuart
SSCommitted
SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)

Group: General Forum Members
Points: 1998 Visits: 846
I can log in on the server itself via Windows authentication, no problem. Restored databases and everything. Server is up and running. Just can't connect from another PC. I AM able to connect from another PC using SQL authentication.. Just not Windows authentication.
Dev
Dev
SSCommitted
SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)

Group: General Forum Members
Points: 1944 Visits: 1598
Are Server & PC on different domains?

Dev

*** Open Network for Database Professionals ***
http://www.linkedin.com/in/devendrashirbad

shaun.stuart
shaun.stuart
SSCommitted
SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)

Group: General Forum Members
Points: 1998 Visits: 846
Nope. Same domains.
Dev
Dev
SSCommitted
SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)SSCommitted (1.9K reputation)

Group: General Forum Members
Points: 1944 Visits: 1598
Search for 'Verify the domain' in following...

How to troubleshoot the "Cannot generate SSPI context" error message
http://support.microsoft.com/kb/811889

Dev

*** Open Network for Database Professionals ***
http://www.linkedin.com/in/devendrashirbad

shaun.stuart
shaun.stuart
SSCommitted
SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)

Group: General Forum Members
Points: 1998 Visits: 846
Yeah, been through all that:

1. Verified.
2. N/A
3. Verified.
4. N/A
5. Verified.
6. Verified.
7. N/A
shaun.stuart
shaun.stuart
SSCommitted
SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)

Group: General Forum Members
Points: 1998 Visits: 846
@VickyHarp on Twitter #sqlhelp found the problem - the clock on the server was wrong. It was 7 hours behind the network time. Changed it and all is working now!!

Thanks for the help!!
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search