September 6, 2016 at 8:31 am
Hello All,
After the server unexpected reboot, the SQL server agent is failing to start and below are the errors in the SQL serveragent log:
Message
[298] SQLServer Error: 18452, Login failed. The login is from an untrusted domain and cannot be used with Windows authentication. [SQLSTATE 28000]
Message
[000] Unable to connect to server '<ServerName>'; SQLServerAgent cannot start
Message
[382] Logon to server '<ServerName>' failed (DisableAgentXPs)
I am unable to start neither with local system account nor domain service account.
Could you please let me know what needs to be checked? I verified SPN for the domain account and the server on the issue is occurring is registered on the account. The SQL service and SQL agent service are running under same domain account however, the SQL Server service is working as expected.
September 6, 2016 at 8:48 am
Is the SQL Server Agent service account a valid login on the server? Is it a syadmin?
-- Gianluca Sartori
September 6, 2016 at 8:55 am
September 6, 2016 at 8:57 am
Yes, the account is sysadmin on the instance.
September 6, 2016 at 9:00 am
As I mentioned above, the SQL server service and SQL server agent is running under same account, I observed from the SQL server error log that the SQL server SPN is being successfully being registered hence there shouldn't be kerbros issue.
September 6, 2016 at 11:30 am
lohithkschalam 92184 (9/6/2016)
As I mentioned above, the SQL server service and SQL server agent is running under same account, I observed from the SQL server error log that the SQL server SPN is being successfully being registered hence there shouldn't be kerbros issue.
The SPN would be only one small piece of the Kerberos process though. The article referenced would still be a good one to work through as there can be numerous reasons for the errors, Kerberos and others. Things such as issues with the account, host file has incorrect or missing local entry, time settings not in sync with AD, Account lacks rights to Access this computer from network and several dozen other possibilities.
Sue
Viewing 6 posts - 1 through 5 (of 5 total)
You must be logged in to reply to this topic. Login to reply