SSPI handshake failed with error code 0x8009030c

  • Hi,

    We have A/A/P clustered Sql server 2005 EE x64 on windows 2003 R2 EE. On node1 we have default instance which is having sharepoint databases. On node 3 instances for Biztalk application.

    We are getting the below error on On node 1 instance and on one of the 3 instances on node 3.

    2009-02-16 15:20:30.12 Logon SSPI handshake failed with error code 0x8009030c while establishing a connection with integrated security; the connection has been closed. [CLIENT: 10.10.10.10]

    2009-02-16 15:20:30.12 Logon Error: 18452, Severity: 14, State: 1.

    2009-02-16 15:20:30.12 Logon Login failed for user ''. The user is not associated with a trusted SQL Server connection. [CLIENT: 10.10.10.10]

    Could you please advice me what should I do to get rid of this error?

    Thank You

    Madhu

  • Could you please give me some info on this and at the same time we got errors in sharepoint servers also as below:

    vent Type:Error

    Event Source:Office Server Search

    Event Category:Gatherer

    Event ID:10036

    Date:2/16/2009

    Time:15:20:30 PM

    User:N/A

    Computer:ABC

    Description:

    A database error occurred.

    Source: Microsoft OLE DB Provider for SQL Server

    Code: 0 occurred 1 time(s)

    Description: Timeout expired

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    Event Type:Error

    Event Source:Windows SharePoint Services 3

    Event Category:General

    Event ID:27745

    Date:2/16/2009

    Time:15:20:30 PM

    User:N/A

    Computer:DEF

    Description:

    The description for Event ID ( 27745 ) in Source ( Windows SharePoint Services 3 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: #50071: Unable to connect to the database SPProd_Cfg on CMS. Check the database connection information and make sure that the database server is running..

    Event Type:Error

    Event Source:Office SharePoint Server

    Event Category:Office Server Shared Services

    Event ID:6482

    Date:2/16/2009

    Time:15:20:30 PM

    User:N/A

    Computer:DEF

    Description:

    Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (205422a4-9eaa-452d-9a7b-11f76b2969df).

    Reason: The request failed with HTTP status 401: Unauthorized.

    Techinal Support Details:

    System.Net.WebException: The request failed with HTTP status 401: Unauthorized.

    at Microsoft.Office.Server.Search.Administration.SearchApi.RunOnServer[T](CodeToRun`1 remoteCode, CodeToRun`1 localCode, Boolean useCurrentSecurityContext, Int32 versionIn)

    at Microsoft.Office.Server.Search.Administration.SearchApi.RunOnServer[T](CodeToRun`1 remoteCode, CodeToRun`1 localCode)

    at Microsoft.Search.Administration.Security.HOSTSFile.ConfigureDedicatedGathering(SearchServiceInstance searchServiceInstance, SPServer dedicatedWebFrontEndServer, IList`1 previousWebApplicationHostNames)

    at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.SynchronizeDefaultContentSource(IDictionary applications)

    at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize()

    at Microsoft.Office.Server.Administration.ApplicationServerJob.ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob)

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

    Event Type:Error

    Event Source:Office SharePoint Server

    Event Category:Office Server General

    Event ID:7888

    Date:2/16/2009

    Time:15:20:30 PM

    User:N/A

    Computer:DEF

    Description:

    A runtime exception was detected. Details follow.

    Message: Login failed for user ''. The user is not associated with a trusted SQL Server connection.

    Techinal Details:

    System.Data.SqlClient.SqlException: Login failed for user ''. The user is not associated with a trusted SQL Server connection.

    at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)

    at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)

    at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)

    at System.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK)

    at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(SqlConnection owningObject, SqlConnectionString connectionOptions, String newPassword, Boolean redirectedUserInstance)

    at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, Object providerInfo, String newPassword, SqlConnection owningObject, Boolean redirectedUserInstance)

    at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection)

    at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup)

    at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)

    at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)

    at System.Data.SqlClient.SqlConnection.Open()

    at Microsoft.Office.Server.Data.SqlSession.OpenConnection()

  • try to execute setspn -L and find out if you have any invalid spn;s in the active directory. get those deleted and it shoud work fine..

  • Thank You..

    We are not using Kerboros for webservice. We are using NTLM.Eventhough we using NTLM do we need to check for invalid SPNs in active directory?

    Is this any serious issue?

  • Could you please clarify me what to do to get rid of this error?

    I searched google a lot but i did not find the solution. Is it really with the Sql server issue or Share point issue?

    If it is Sql server issue please advice me what are the stpes I need to take

  • Try giving security admin privileges to Sharepoint accounts (Admin account as well as farm account), i assume you are using only 2 accounts.

    Did you configure search service? whats the status? Is it running?

  • I spent two days trying to figure out a solution to this problem. My problem was my computer name. It was 16 characters and server 2008 net bios will only read up to 15. As soon as I renamed my PC to be under 15 characters, rebooted and joined the domain. Service start perfectly.

  • Hi

    Just tagging on to this thread, I'm having an issue with reporting services.

    I have a data source which I want referencing via a DNS Entry as the database is mirrored, so the DNS entry will point to the live server.

    Under the data source Connection String on Report Manager I have

    data source=iris_test.forthports.net;initial catalog=IRIS;Integrated Security=SSPI; Trusted_Connection=true;

    I have also selected the following:

    - Credentials stored securely in the report server

    - Use as Windows credentials when connecting to the data source

    - Specified a valid domain account in the format DOMAIN\UserAccount

    When I try to run the report I get the following error in Report Manager

    An error has occurred during report processing.

    Cannot create a connection to data source 'dsIrisSys'.

    Login failed for user ''. The user is not associated with a trusted SQL Server connection.

    On the SQL side the following errors are logged:

    Date15/03/2010 13:01:43

    LogSQL Server (Current - 15/03/2010 13:01:00)

    SourceLogon

    Message

    Error: 17806, Severity: 20, State: 2.

    Date15/03/2010 13:01:43

    LogSQL Server (Current - 15/03/2010 13:01:00)

    SourceLogon

    Message

    SSPI handshake failed with error code 0x8009030c while establishing a connection with integrated security; the connection has been closed. [CLIENT: 192.168.17.151]

    Date15/03/2010 13:01:43

    LogSQL Server (Current - 15/03/2010 13:01:00)

    SourceLogon

    Message

    Error: 18452, Severity: 14, State: 1.

    Date15/03/2010 13:01:43

    LogSQL Server (Current - 15/03/2010 13:01:00)

    SourceLogon

    Message

    Login failed for user ''. The user is not associated with a trusted SQL Server connection. [CLIENT: 192.168.17.151]

    Both SSRS and SQL server are running on the same machine (SQLTEST02).

    I'm not 100% on what I need for the SPN, but I have

    Registered ServicePrincipalNames for CN=SQLTEST01,CN=Computers,DC=forthports,DC=

    net:

    HOST/sqltest01.forthports.net

    HOST/SQLTEST01

    Within IIS I have Integrated security set for the Reporting Services Website (which appears to work fine).

    Lastly I can connect remotely using SSMS as the required DOMAIN\UserAccount.

    I can't see why this is causing a problem - I would appreciate any help.

    _____________________________________________________________________________MCITP: Business Intelligence Developer (2005)

  • Matthew Clifford (9/30/2009)


    I spent two days trying to figure out a solution to this problem. My problem was my computer name. It was 16 characters and server 2008 net bios will only read up to 15. As soon as I renamed my PC to be under 15 characters, rebooted and joined the domain. Service start perfectly.

    thanks for mentioning the solution. that those limits still exist is easily overlooked, surprising and unexpected probably.

  • What does the SPN do?

    (i'm seeing alot of SPN and Kerberos related articles on the web) I'm not a network guy - so I'm not quite sure why this is needed? It would be helpful to know

    _____________________________________________________________________________MCITP: Business Intelligence Developer (2005)

  • SPN = Service Principal Name which is utilized by Kerberos authentication.

  • Hi,

    we had the similiar kind of issue, It was because the sql domain account in AD from which all sql services was running, it got locked out automatically..

    Check if its locked for you.

    Regards,

    Sushant

    Regards
    Sushant Kumar
    MCTS,MCP

  • What you mean by locking here ??????????? 🙁

  • windows account locking

  • wen u check on ur AD accounts, the account locked out option is checked ..

    Regards,

    Sushant

    Regards
    Sushant Kumar
    MCTS,MCP

Viewing 15 posts - 1 through 15 (of 21 total)

You must be logged in to reply to this topic. Login to reply