Authentication Failed

Question

Post reply

Authentication Failed

VastSQL

SSC-Dedicated

Points: 36121
More actions
January 6, 2016 at 1:21 am

#323367

Hi Experts,
Getting below alert on SCOM.
SQL Server cannot authenticate using Kerberos because the Service Principal Name (SPN) is missing, misplaced, or duplicated.
Please advise.
January 14, 2016 at 10:25 pm

This was removed by the editor as SPAM

Viewing 9 posts - 1 through 8 (of 8 total)

You must be logged in to reply to this topic. Login to reply

benjamin.reyes SSCertifiable Points: 5249 More actions · Answer 1

The error is pretty descriptive.

https://support.microsoft.com/en-us/kb/2443457%5B/url%5D

johnwalker10 SSCrazy Eights Points: 9124 More actions · Answer 2

To fix this problem you need to update the MP to the SQL related MPs 6.6.4.0

VastSQL SSC-Dedicated Points: 36121 More actions · Answer 3

Thanks Guys,

Added SPN success fully but still getting below error in SQL Error log.

The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/ABC-SYS.sys.abc.in:5432 ] for the SQL Server service. Windows return code: 0x2098, state: 20. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies and if the SPN has not been manually registered.

Used below script to add SPN

SetSPN -S MSSQLSvc/MSSQLSvc/ABC-SYS.sys.abc.in:5432 abc\rkn

SetSPN -S MSSQLSvc/MSSQLSvc/ABC-SYS.sys.abc.in:2014 abc\rkn

VastSQL SSC-Dedicated Points: 36121 More actions · Answer 4

VastSQL

SSC-Dedicated

Points: 36121

January 10, 2016 at 12:54 am

#1850790

Anyone on this

Eirikur Eiriksson SSC Guru Points: 182915 More actions · Answer 5

Quick question, did you just add the SPMs or did you remove them before adding them again?

😎

The article benjamin.reyes posted a link to has good instructions on how to handle this problem.

VastSQL SSC-Dedicated Points: 36121 More actions · Answer 6

Eirikur Eiriksson (1/10/2016)
Quick question, did you just add the SPMs or did you remove them before adding them again?
😎
The article benjamin.reyes posted a link to has good instructions on how to handle this problem.

Thanks Eirikur,

Added SPN after checking whether SPN exists.

Ashif Shaikh Default port Points: 1445 More actions · Answer 7

The errors in SCOM does not goes away instantly.

I have to wait for some time for the error to go away, may be you need to contact your SCOM administrator.