Cannot generate SSPI context but SPNs are good

• webrunner

  SSC-Dedicated

  Points: 31862

  More actions

  September 1, 2022 at 5:03 pm

  #4082953

  Hello experts,

  I'm troubleshooting a SQL Server that throws this error when I try to connect from SSMS:

  The target principal name is incorrect. Cannot generate SSPI context. (Microsoft SQL Server, Error: 0)

  Based on previous encounters with this error, I ran the Kerberos Configuration Manager, and it lists two SPNs as Good.

  Also, based on the link below, I ran this query:

  SELECT net_transport, auth_scheme 
  FROM sys.dm_exec_connections 
  WHERE session_id = @@SPID;

  And got this:

  net_transport auth_scheme

  Shared memory NTLM

  https://docs.microsoft.com/en-us/troubleshoot/sql/connect/cannot-generate-sspi-context-error

  Also, I enabled TCP/IP in Configuration Manager and set a nondefault port in IPAll. Not sure if that is an issue.

  Finally, I can connect from a different SQL Server's SSMS, just not the one I normally use.

  Does anyone know how  can find out what's going on and troubleshoot this error properly?

  Thanks for any help.

  -- webrunner

  -------------------
  A SQL query walks into a bar and sees two tables. He walks up to them and asks, "Can I join you?"
  Ref.: http://tkyte.blogspot.com/2009/02/sql-joke.html

• Site Owners

  SSC Guru

  Points: 80330

  More actions

  September 2, 2022 at 5:10 pm

  #4083408

  Thanks for posting your issue and hopefully someone will answer soon.

  This is an automated bump to increase visibility of your question.