Kerberos Auth not Working Despite registered SPN

  • I think i have a brick pattern left on my forehead from pounding it against the wall for so long., so I'm turning to the web for help.

    I have confirmed that the SPN of SQL server is registered for the server.

    setspn -L mySqlServer returns

    MSSQLSERVER/mySqlServer.myDomain.com:1433

    MSSQLSvc/mySqlServer.myDomain.com:1433

    setspn -Q MSSQLSERVER/mySqlServer returns

    MSSQLSERVER/mySqlServer.myDomain.com:1433

    MSSQLSvc/mySqlServer.myDomain.com:1433

    MSSQLSvc/mySqlServer.myDomain.com

    MSSQLSvc/mySqlServer

    When is query sys.dm_exec_connections the auth_scheme returned is NTLM.

    I have restarted SQL Server services on the server.

    I have flushed the DNS on my workstation.

    I have rebooted my workstation.

    Still I cannot get a Kerberos authenticated conenction. Other servers I have on the same subnet, running under the same service account, do authenticate using Kerberos. Fortunately this server is a test (non-produciton) server that i can beat on until a resolution is found.

    My question to you, the collective genius that is the internet (enough butt kissing? :-D), is what should I look at next? What active directory permissions does the service account require to properly register an SPN? I have read the good articles written here and the articles on MSDN, and at this point am completely stumped.

    Thanks in advance,

    Greg


    Greg Roberts

  • I forgot to add I'm runnin SQL 2008 R2 in Windows Server 2008 R2. Somehow I managed to post this in the 2005 forum. :Whistling: Sorry about that. I'll report in the 2008 forum.


    Greg Roberts

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply