Connecting with AD account to another domain

• jcourtjrSQL

  SSC Eights!

  Points: 865

  More actions

  February 28, 2020 at 6:23 pm

  #3729675

  We are trying to connect an AD user in another trusted domain to SQL Server. We can connect using SQL Authentication but when someone tries to login with an AD account (from the other domain, not the one the SQL server is on) we get the dreaded "The target principal name is incorrect. Cannot generate SSPI context".

  So SQL Server is on Domain A

  Users in Domain B are trying to connect to it.

  Domains have 2 way trust.

  We have a valid SPN in Domain A, should that be sufficient or does there need to be a seperate SPN registered in Domain B as well with the same info?

• Site Owners

  SSC Guru

  Points: 80330

  More actions

  February 29, 2020 at 7:10 pm

  #3729862

  Thanks for posting your issue and hopefully someone will answer soon.

  This is an automated bump to increase visibility of your question.