August 20, 2010 at 9:53 pm
Hi,
We have a 2 node a/p cluster setup for SQL Server 2005 x64 with SP3 on Windows 2003 x64 with SP2.
The SQLAgent job failed with below message:
Event Type:Warning
Event Source:SQLAgent$INS1
Event Category:Job Engine
Event ID:208
Date:8/20/2010
Time:1:00:15 AM
User:N/A
Computer:SQLVS1
Description:
SQL Server Scheduled Job 'xyz' (0x2E8BB24C5BA0194385DC1B91EFA9C73F) - Status: Failed - Invoked on: 2010-08-20 00:58:00 - Message: The job failed. Unable to determine if the owner (sa) of job xyz has server access (reason: Unable to connect to server - check SQL Server and SQL Server Agent errorlogs).
JUST BEFORE 2 mins, THIS JOB FAILS, THERE WAS AN ERROR IN SYSTEM EVENT VIEWER AS BELOW:
Event Type:Warning
Event Source:LSASRV
Event Category:SPNEGO (Negotiator)
Event ID:40960
Date:8/20/2010
Time:12:58:15 AM
User:N/A
Computer:SQL1
Description:
The Security System detected an authentication error for the server MSSQLSvc/SQLVS1:1456. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
When looked the SQLAgent.Out file, there are many errors logged as below and never seen these messages in our environment:
2010-08-20 00:58:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:58:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:58:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:58:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:58:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 00:58:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 00:58:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:58:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:58:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:58:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:58:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:58:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:58:50 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:58:50 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:58:50 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:58:50 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:58:50 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:58:50 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:59:10 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:59:10 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:59:10 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:59:10 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:59:10 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:59:10 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:59:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:59:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:59:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:59:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:59:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:59:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 00:59:45 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:59:45 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 00:59:45 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateJobActivity_NextScheduledRunDate)
2010-08-20 01:00:00 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:00 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:00 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateJobActivity_NextScheduledRunDate)
2010-08-20 01:00:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:00:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:00:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 01:00:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnGetOperator)
2010-08-20 01:00:30 - ! [252] Failed to retrieve operator 1 from the server
2010-08-20 01:00:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnGetOperator)
2010-08-20 01:00:30 - ! [252] Failed to retrieve operator 1 from the server
2010-08-20 01:00:31 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:31 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:31 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:00:45 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:45 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:45 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:00:45 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:45 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:45 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:00:51 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:00:51 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:00:51 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:01 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:01 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:01 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:01 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:01 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 01:01:01 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 01:01:11 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:11 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:11 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:31 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:31 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:31 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:36 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:36 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:36 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:36 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:36 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:36 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:46 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:46 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:46 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateJobActivity_NextScheduledRunDate)
2010-08-20 01:01:56 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:56 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:56 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:01:56 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:01:56 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:01:56 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:02:01 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:02:01 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:02:01 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:02:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:02:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:02:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:02:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:02:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:02:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:02:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:02:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:02:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:02:31 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:02:31 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:02:31 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateJobActivity_NextScheduledRunDate)
2010-08-20 01:02:46 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:02:46 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:02:46 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateJobActivity_NextScheduledRunDate)
2010-08-20 01:03:01 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:03:01 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:03:01 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:03:01 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:03:01 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:03:01 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:03:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:03:16 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:03:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:03:16 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:03:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnGetOperator)
2010-08-20 01:03:16 - ! [252] Failed to retrieve operator 1 from the server
2010-08-20 01:03:16 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnGetOperator)
2010-08-20 01:03:16 - ! [252] Failed to retrieve operator 1 from the server
2010-08-20 01:03:31 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:03:31 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:03:31 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:03:31 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:03:31 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:03:31 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:04:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:04:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:04:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 01:04:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:04:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:04:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 01:04:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:04:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:04:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:04:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:04:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:04:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:04:50 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:04:50 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:04:50 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:04:50 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:04:50 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:04:50 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:05:10 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:05:10 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:05:10 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:05:10 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:05:10 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:05:10 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:05:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:05:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:05:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:05:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:05:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:05:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (JobManager)
2010-08-20 01:05:45 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:05:45 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:05:45 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateJobActivity_NextScheduledRunDate)
2010-08-20 01:06:00 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:06:00 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:06:00 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateJobActivity_NextScheduledRunDate)
2010-08-20 01:06:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:06:15 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:06:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:06:15 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:06:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:06:15 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:06:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:06:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:06:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:06:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:06:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnGetOperator)
2010-08-20 01:06:30 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnGetOperator)
2010-08-20 01:06:30 - ! [252] Failed to retrieve operator 1 from the server
2010-08-20 01:06:30 - ! [252] Failed to retrieve operator 1 from the server
2010-08-20 01:06:45 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:06:45 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:06:45 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:06:45 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:06:45 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:06:45 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnAttemptCachableOp)
2010-08-20 01:07:01 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:07:01 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 01:07:01 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:07:01 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
2010-08-20 01:07:01 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
2010-08-20 01:07:01 - ! [382] Logon to server 'SQLVS1\INS1' failed (ConnUpdateStartExecutionDate)
Note: The same issue repeated again one more time after 4 hours and logged same error messages in Application log, system event viewer and sqlagent.out file .BUT THERE ARE NO ERRORS IN THE ERROR LOG.
Questions:
1. Is this something related security hack? or
2. Is this related to NETWORK issue? or
3. Is something wrong with the port SQL Server listening to?
I unable get any clue. Please advice me
Thanks
August 21, 2010 at 12:06 am
From the error messages it looks like the server is not able to connect to the Active Directory to validate the windows users. Also have a look at this article
Pradeep Adiga
Blog: sqldbadiaries.com
Twitter: @pradeepadiga
August 21, 2010 at 7:24 pm
Thank you,
From the error messages it looks like the server is not able to connect to the Active Directory to validate the windows users.
We are copying the bak file of our database from Server A in abc domain to Server B in xyz domain using Scheduler task. Is this cause this kind of behavior??
Scheduler copy job tuns at 9 PM but these errors came at around 1 am so there is NO link between these two.
How can I strongly confirm that this is an issue with AD & DNS to Windows team?
Thanks
August 22, 2010 at 10:18 am
How can I strongly confirm that this is an issue with AD & DNS to Windows team?
Please go through the System Event Log at the time this message appears in Agent Log. That should help you in the right direction
Pradeep Adiga
Blog: sqldbadiaries.com
Twitter: @pradeepadiga
August 23, 2010 at 9:17 am
I've also seen this at a place where there wasn't redundancy on the AD/DNS server. It was accidentally added to an auto-update policy group for Windows patches. That (single) server would install patches at nightly and then reboot itself, and anything requiring authentication stopped working until the AD server came back up. The time on your error messages is around 1am, so this in is a typical time range for installing patches.
I've seen with Win2003 (not sure on Win2008), even if there is redundancy, the DNS cache on the SQL machine gets an AD server and wants to keep going to that particular one even if it's down (it will *eventually* switch itself over to another AD).
Along that same idea of AD and/or DNS outage, I've also been at a place with a policy of rebooting all servers every night. That worked for them, except of course that the nothing could authenticate until the AD server came back up.
August 24, 2010 at 2:13 am
I used to work on a product with a SQL server backend and looking through your log there is an error which rings some bells:
2010-08-20 00:58:30 - ! [298] SQLServer Error: 848, SQL Network Interfaces: The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. [SQLSTATE HY000]
2010-08-20 00:58:30 - ! [298] SQLServer Error: 848, Cannot generate SSPI context [SQLSTATE HY000]
The "Cannot generate SSPI context" problem was something we came across quite a lot. Here is a Microsoft knowledgebase article on how to fix it:
http://support.microsoft.com/kb/811889
Essentially the SQL server no longer sees itself as part of the domain and can't authenticate itself for the job. It sees these login attempts as your attack, and without authentication the job will fail. Its to do with the SPN (service principal name) configuration. If you read through the document it should point you in the right direction for the fix.
Regards,
Matt
August 25, 2010 at 12:24 am
Hi,
I got the same error again. Here is the System event viewer error generated just before the that
Event Type:Warning
Event Source:LSASRV
Event Category:SPNEGO (Negotiator)
Event ID:40960
Date:8/24/2010
Time:6:24:15 PM
User:N/A
Computer:ABC
Description:
The Security System detected an authentication error for the server MSSQLSvc/SQLVS:xxxx. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request.
(0xc000005e)".
Please advice me. thanks
August 25, 2010 at 2:03 am
Hi,
As above in my last post the microsoft article will help you. It reads:
http://support.microsoft.com/kb/811889:
"Because you might not use a domain administrator account to run the SQL Server service (to prevent security risk), the computer that is running SQL Server cannot create its own SPN. Therefore, you must manually create an SPN for your computer that is running SQL Server if you want to use Kerberos when you connect to a computer that is running SQL Server. This is true if you are running SQL Server under a domain user account or under a local user account."
As said above if you follow the section "How to configure the SQL Server service to create SPNs dynamically for the SQL Server instances" it will resolve your problem.
A work around would be, that SSPI is not used by Named Pipes or multi-protocol connections. Therefore, you can avoid the problem by configuring your clients to connect from a protocol other than TCP/IP.
Regards,
Matt
August 25, 2010 at 10:08 am
Where to check whether an instance of SQL Server is using Kerberos authentication?
Thanks
August 25, 2010 at 10:13 am
Kerberos is windows authentication. If you use windows usernames and passwords. The service must be running either using a local windows account or a domain windows account. You will be using Kerberos.
August 25, 2010 at 10:41 am
Thank you,
Kerberos is windows authentication. If you use windows usernames and passwords. The service must be running either using a local windows account or a domain windows account. You will be using Kerberos.
We are using domain accounts for SQL Server services and all are from AD. No local windows users. So in this case we are NOT using Kerberos right?
August 26, 2010 at 1:57 am
What is kerberos: http://technet.microsoft.com/en-us/library/cc780469%28WS.10%29.aspx
you are using it.
Viewing 12 posts - 1 through 11 (of 11 total)
You must be logged in to reply to this topic. Login to reply