Showing posts with label event. Show all posts
Showing posts with label event. Show all posts

Monday, February 20, 2012

KDC Problem

Hello:
A while back I started getting KDC errors in my System log on my domain
controller. The error is:
Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 11
Date: 3/16/2005
Time: 9:34:08 AM
User: N/A
Computer: TPADC1
Description:
There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
type 10.
After researching this I did a "ldifde" dump of the active directory
database and then searched the dump and found a double entry for
"MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
domain admins accounts. Since this appeared to be a duplicate I decided to
delete it. Within a few minutes I had problems with connections to SQL. I
put it back right away and then everything was working fine again.
Obviously the SQL server has some kind of a link to this...
I have done some searching but have not found anything on it. Does anyone
have any suggestions on cleaning this up?
Harrison MidkiffHave a look at http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
Peter
"Do not awake the sleeping dragon for you are crunchy and taste good with
ketchup".
Peter The Spate
"Harrison Midkiff" wrote:
> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided to
> delete it. Within a few minutes I had problems with connections to SQL. I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>
>|||Peter:
Thanks for replying to my post.
This is the article I followed which allowed me to find the duplicate but is
was on a user account not a computer account. I think perhaps SQL has
something in it hard coded to reference this user account.
Any suggestions welcome...
Harrison Midkiff
"Peter 'Not Peter The Spate' Nolan"
<PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
> Have a look at
> http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
> Peter
> "Do not awake the sleeping dragon for you are crunchy and taste good with
> ketchup".
> Peter The Spate
> "Harrison Midkiff" wrote:
>> Hello:
>> A while back I started getting KDC errors in my System log on my domain
>> controller. The error is:
>> Event Type: Error
>> Event Source: KDC
>> Event Category: None
>> Event ID: 11
>> Date: 3/16/2005
>> Time: 9:34:08 AM
>> User: N/A
>> Computer: TPADC1
>> Description:
>> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
>> type 10.
>> After researching this I did a "ldifde" dump of the active directory
>> database and then searched the dump and found a double entry for
>> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
>> domain admins accounts. Since this appeared to be a duplicate I decided
>> to
>> delete it. Within a few minutes I had problems with connections to SQL.
>> I
>> put it back right away and then everything was working fine again.
>> Obviously the SQL server has some kind of a link to this...
>> I have done some searching but have not found anything on it. Does
>> anyone
>> have any suggestions on cleaning this up?
>> Harrison Midkiff
>>|||try with setspn tool
or
1. use adsiedit.msc and show servicePrincipalName for your sql server
(computer account)
2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
delete duplicated spn
-- -- "Within a few minutes I had problems with connections to SQL. "
what? error message'
"Harrison Midkiff" wrote:
> Peter:
> Thanks for replying to my post.
> This is the article I followed which allowed me to find the duplicate but is
> was on a user account not a computer account. I think perhaps SQL has
> something in it hard coded to reference this user account.
> Any suggestions welcome...
> Harrison Midkiff
> "Peter 'Not Peter The Spate' Nolan"
> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
> > Have a look at
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
> >
> > Peter
> >
> > "Do not awake the sleeping dragon for you are crunchy and taste good with
> > ketchup".
> > Peter The Spate
> >
> > "Harrison Midkiff" wrote:
> >
> >> Hello:
> >>
> >> A while back I started getting KDC errors in my System log on my domain
> >> controller. The error is:
> >>
> >> Event Type: Error
> >> Event Source: KDC
> >> Event Category: None
> >> Event ID: 11
> >> Date: 3/16/2005
> >> Time: 9:34:08 AM
> >> User: N/A
> >> Computer: TPADC1
> >> Description:
> >> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> >> type 10.
> >>
> >> After researching this I did a "ldifde" dump of the active directory
> >> database and then searched the dump and found a double entry for
> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> >> domain admins accounts. Since this appeared to be a duplicate I decided
> >> to
> >> delete it. Within a few minutes I had problems with connections to SQL.
> >> I
> >> put it back right away and then everything was working fine again.
> >> Obviously the SQL server has some kind of a link to this...
> >>
> >> I have done some searching but have not found anything on it. Does
> >> anyone
> >> have any suggestions on cleaning this up?
> >>
> >> Harrison Midkiff
> >>
> >>
> >>
>
>|||Yes. To determine which domain account is the one that is currently being
used, we can use Adsiedit.msc to delete one of the
MSSQLSvc/elvis.aviinc.local:1433 SPNs, then *restart* the SQL service(s).
The SQL service will re-add the SPN on the currently used service account.
If it was not readded, then the duplicate has been removed.
Adsiedit.msc and Ldp.exe are included on the Windows 2000 installation CD.
You can install these tools from the CD in Support\Tools\Setup.exe
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Thread-Topic: KDC Problem
>thread-index: AcUqezBszBBVWy/FSSSK8UVZqmT1Hg==>X-WBNR-Posting-Host: 212.200.135.192
>From: "=?Utf-8?B?QWxla3NhbmRhciBHcmJpYw==?="
<AleksandarGrbic@.discussions.microsoft.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
>Subject: Re: KDC Problem
>Date: Wed, 16 Mar 2005 14:55:03 -0800
>Lines: 81
>Message-ID: <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382093
>X-Tomcat-NG: microsoft.public.sqlserver.server
>try with setspn tool
>or
>1. use adsiedit.msc and show servicePrincipalName for your sql server
>(computer account)
>2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>delete duplicated spn
>-- -- "Within a few minutes I had problems with connections to SQL. "
>what? error message'
>
>
>"Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of
the
>> >> domain admins accounts. Since this appeared to be a duplicate I
decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>|||This is a multi-part message in MIME format.
--=_NextPart_000_012E_01C52AF1.C085DB50
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: quoted-printable
Aleksandar:
Thanks for replying to my post.
The error which was appearing on the SQL Enterprise Manager was, "Unable =to initialize SSPI context".
Any suggestions?
Harrison Midkiff
"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in =message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
> try with setspn tool
> > or > > 1. use adsiedit.msc and show servicePrincipalName for your sql server =
> (computer account)
> > 2. use ldp.exe and search for "servicePrincipalName=3DMSSQLSvc/elvis*"
> delete duplicated spn
> > -- -- "Within a few minutes I had problems with connections to SQL. " =
> what? error message'
> > > > > "Harrison Midkiff" wrote:
> >> Peter:
>> >> Thanks for replying to my post.
>> >> This is the article I followed which allowed me to find the duplicate =but is >> was on a user account not a computer account. I think perhaps SQL =has >> something in it hard coded to reference this user account.
>> >> Any suggestions welcome...
>> >> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan" >> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in =message >> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at >> > http://support.microsoft.com/default.aspx?scid=3Dkb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste =good with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my =domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name =MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active =directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one =of the
>> >> domain admins accounts. Since this appeared to be a duplicate I =decided >> >> to
>> >> delete it. Within a few minutes I had problems with connections =to SQL. >> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. =Does >> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >> >> >> --=_NextPart_000_012E_01C52AF1.C085DB50
Content-Type: text/html;
charset="Utf-8"
Content-Transfer-Encoding: quoted-printable
=EF=BB=BF<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
&

Aleksandar:
Thanks for replying to my =post.
The error which was appearing on =the SQL Enterprise Manager was, "Unable to =initialize SSPI context".
Any suggestions?
Harrison Midkiff
"Aleksandar Grbic" wrote in message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...> =try with setspn tool> > or > > 1. use adsiedit.msc and show servicePrincipalName for your sql server > (computer account)> > 2. use ldp.exe and search for "servicePrincipalName=3DMSSQLSvc/elvis*"> delete duplicated =spn> > -- -- "Within a few minutes I had problems with connections to =SQL. " > what? error message'> > > => > "Harrison Midkiff" wrote:> > Peter:> > Thanks for replying to my =post.> > This is the article I followed which allowed me to find the =duplicate but is > was on a user account not a computer account. I think perhaps SQL has > something in it hard =coded to reference this user account.> > Any suggestions =welcome...> > Harrison Midkiff> "Peter ='Not Peter The Spate' Nolan" > wrote in message > news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...> > Have a look at > => http://support.microsoft.com/default.aspx?scid=3Dkb;en-us;321044=> >> > Peter> >> > "Do not awake the sleeping dragon for you are =crunchy and taste good with> > ketchup".> > Peter The Spate> >> > "Harrison Midkiff" =wrote:> >> >> Hello:> >>> =>> A while back I started getting KDC errors in my System log on my domain> >> controller. The error is:> >>> >> Event Type: Error> >> =Event Source: KDC> >> Event Category: None> =>> Event ID: 11> >> Date: 3/16/2005> >> Time: 9:34:08 AM> >> User: N/A> =>> Computer: TPADC1> >> Description:> >> =There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 =of> >> type 10.> >>> >> After =researching this I did a "ldifde" dump of the active directory> >> =database and then searched the dump and found a double entry for> =>> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one =of the> >> domain admins accounts. Since this =appeared to be a duplicate I decided > >> to> >> =delete it. Within a few minutes I had problems with connections to SQL. > >> I> >> put it back right away and =then everything was working fine again.> >> Obviously the =SQL server has some kind of a link to this...> >>> =>> I have done some searching but have not found anything on it. Does > >> anyone> >> have any suggestions =on cleaning this up?> >>> >> Harrison Midkiff> >>> >>> >> > > >

--=_NextPart_000_012E_01C52AF1.C085DB50--|||Hi Harrison,
You may want to restart the SQL Server service after you have removed the
duplicate SPN. If the SPN is re-added, remove the other SPN and then
restart the SQL Server service.
Feel free to let me know if this resolves your problem.
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>Subject: Re: KDC Problem
>Date: Thu, 17 Mar 2005 13:03:45 -0500
>Lines: 254
>Organization: Audio Visual Innovations, Inc.
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.183
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
9.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>X-Tomcat-NG: microsoft.public.sqlserver.server
>Aleksandar:
>Thanks for replying to my post.
>The error which was appearing on the SQL Enterprise Manager was, "Unable
to initialize SSPI context".
>Any suggestions?
>Harrison Midkiff
>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
>> try with setspn tool
>> or
>> 1. use adsiedit.msc and show servicePrincipalName for your sql server >
(computer account)
>> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>> delete duplicated spn
>> -- -- "Within a few minutes I had problems with connections to SQL. " >
what? error message'
>>
>>
>> "Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of
the
>> >> domain admins accounts. Since this appeared to be a duplicate I
decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>|||In almost every case I remember SSPI errors was related with wrong DNS
records, so check the DNS.
(ex computer name is London instead of London.nwtraders.msft ) SETSPN works
with FQDN only.
Regards,
Daniel
"Harrison Midkiff" <HMidkiff@.aviinc.com> wrote in message
news:uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl...
> Hello:
> A while back I started getting KDC errors in my System log on my domain
> controller. The error is:
> Event Type: Error
> Event Source: KDC
> Event Category: None
> Event ID: 11
> Date: 3/16/2005
> Time: 9:34:08 AM
> User: N/A
> Computer: TPADC1
> Description:
> There are multiple accounts with name MSSQLSvc/elvis.aviinc.local:1433 of
> type 10.
> After researching this I did a "ldifde" dump of the active directory
> database and then searched the dump and found a double entry for
> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of the
> domain admins accounts. Since this appeared to be a duplicate I decided
to
> delete it. Within a few minutes I had problems with connections to SQL.
I
> put it back right away and then everything was working fine again.
> Obviously the SQL server has some kind of a link to this...
> I have done some searching but have not found anything on it. Does anyone
> have any suggestions on cleaning this up?
> Harrison Midkiff
>|||William:
Thanks for replying to my post. Do you know of any tech net articles which
may explain this behavior. The reason I ask is due to the sensitive nature
of SQL we are going to have a meeting before we attempt any changes.
Thanks.
Harrison Midkiff
"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
> Hi Harrison,
> You may want to restart the SQL Server service after you have removed the
> duplicate SPN. If the SPN is re-added, remove the other SPN and then
> restart the SQL Server service.
> Feel free to let me know if this resolves your problem.
> Sincerely,
> William Wang
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --
>>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>>Subject: Re: KDC Problem
>>Date: Thu, 17 Mar 2005 13:03:45 -0500
>>Lines: 254
>>Organization: Audio Visual Innovations, Inc.
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative;
>> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>>Newsgroups: microsoft.public.sqlserver.server
>>NNTP-Posting-Host: 208.5.55.183
>>Path:
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
> 9.phx.gbl
>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>>X-Tomcat-NG: microsoft.public.sqlserver.server
>>Aleksandar:
>>Thanks for replying to my post.
>>The error which was appearing on the SQL Enterprise Manager was, "Unable
> to initialize SSPI context".
>>Any suggestions?
>>Harrison Midkiff
>>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
>> try with setspn tool
>> or
>> 1. use adsiedit.msc and show servicePrincipalName for your sql server >
> (computer account)
>> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>> delete duplicated spn
>> -- -- "Within a few minutes I had problems with connections to SQL. " >
> what? error message'
>>
>>
>> "Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
> but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
> with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
> domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
> MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one of
> the
>> >> domain admins accounts. Since this appeared to be a duplicate I
> decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
> SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>>
>|||Hi Harrison,
The relevent articles I could find are:
305971 Windows 2000 Server Prompts Domain User for Credentials
http://support.microsoft.com/?id=305971
811889 HOW TO: Troubleshoot the "Cannot Generate SSPI Context" Error Message
http://support.microsoft.com/?id=811889
HTH!
Sincerely,
William Wang
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
--
>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
<AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
<#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
<3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
<O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
<lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl>
>Subject: Re: KDC Problem
>Date: Wed, 23 Mar 2005 08:32:22 -0500
>Lines: 155
>Organization: Audio Visual Innovations, Inc.
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <Oi9BAz6LFHA.3328@.TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.sqlserver.server
>NNTP-Posting-Host: 208.5.55.190
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
4.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382949
>X-Tomcat-NG: microsoft.public.sqlserver.server
>William:
>Thanks for replying to my post. Do you know of any tech net articles
which
>may explain this behavior. The reason I ask is due to the sensitive
nature
>of SQL we are going to have a meeting before we attempt any changes.
>Thanks.
>Harrison Midkiff
>"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
>news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
>> Hi Harrison,
>> You may want to restart the SQL Server service after you have removed the
>> duplicate SPN. If the SPN is re-added, remove the other SPN and then
>> restart the SQL Server service.
>> Feel free to let me know if this resolves your problem.
>> Sincerely,
>> William Wang
>> Microsoft Online Partner Support
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> --
>>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
>> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
>> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
>> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
>>Subject: Re: KDC Problem
>>Date: Thu, 17 Mar 2005 13:03:45 -0500
>>Lines: 254
>>Organization: Audio Visual Innovations, Inc.
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative;
>> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
>>Newsgroups: microsoft.public.sqlserver.server
>>NNTP-Posting-Host: 208.5.55.183
>>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
>> 9.phx.gbl
>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
>>X-Tomcat-NG: microsoft.public.sqlserver.server
>>Aleksandar:
>>Thanks for replying to my post.
>>The error which was appearing on the SQL Enterprise Manager was, "Unable
>> to initialize SSPI context".
>>Any suggestions?
>>Harrison Midkiff
>>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
>> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
>> try with setspn tool
>> or
>> 1. use adsiedit.msc and show servicePrincipalName for your sql server
>> (computer account)
>> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
>> delete duplicated spn
>> -- -- "Within a few minutes I had problems with connections to SQL. "
>> what? error message'
>>
>>
>> "Harrison Midkiff" wrote:
>> Peter:
>> Thanks for replying to my post.
>> This is the article I followed which allowed me to find the duplicate
>> but is
>> was on a user account not a computer account. I think perhaps SQL has
>> something in it hard coded to reference this user account.
>> Any suggestions welcome...
>> Harrison Midkiff
>> "Peter 'Not Peter The Spate' Nolan"
>> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in
message
>> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
>> > Have a look at
>> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
>> >
>> > Peter
>> >
>> > "Do not awake the sleeping dragon for you are crunchy and taste good
>> with
>> > ketchup".
>> > Peter The Spate
>> >
>> > "Harrison Midkiff" wrote:
>> >
>> >> Hello:
>> >>
>> >> A while back I started getting KDC errors in my System log on my
>> domain
>> >> controller. The error is:
>> >>
>> >> Event Type: Error
>> >> Event Source: KDC
>> >> Event Category: None
>> >> Event ID: 11
>> >> Date: 3/16/2005
>> >> Time: 9:34:08 AM
>> >> User: N/A
>> >> Computer: TPADC1
>> >> Description:
>> >> There are multiple accounts with name
>> MSSQLSvc/elvis.aviinc.local:1433 of
>> >> type 10.
>> >>
>> >> After researching this I did a "ldifde" dump of the active
directory
>> >> database and then searched the dump and found a double entry for
>> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one
of
>> the
>> >> domain admins accounts. Since this appeared to be a duplicate I
>> decided
>> >> to
>> >> delete it. Within a few minutes I had problems with connections to
>> SQL.
>> >> I
>> >> put it back right away and then everything was working fine again.
>> >> Obviously the SQL server has some kind of a link to this...
>> >>
>> >> I have done some searching but have not found anything on it. Does
>> >> anyone
>> >> have any suggestions on cleaning this up?
>> >>
>> >> Harrison Midkiff
>> >>
>> >>
>> >>
>>
>>
>
>|||Hi William,
I was reading the messages posted by Harrison, it seems tobe that he has the
same problem than me, i used ldp.exe and i could find this accounts:
ldap_search_s(ld, "dc=dinamica,dc=com,dc=co", 2,
"serviceprincipalname=MSSQLSvc/ns.dinamica.com.co:1433", attrList, 0, &msg)
Result <0>: (null)
Matched DNs:
Getting 2 entries:
>> Dn: CN=Administrator,CN=Users,DC=dinamica,DC=com,DC=co
1> canonicalName: dinamica.com.co/Users/Administrator;
1> cn: Administrator;
1> description: Built-in account for administering the computer/domain;
1> distinguishedName: CN=Administrator,CN=Users,DC=dinamica,DC=com,DC=co;
4> objectClass: top; person; organizationalPerson; user;
1> name: Administrator;
>> Dn: CN=NS,OU=Domain Controllers,DC=dinamica,DC=com,DC=co
1> canonicalName: dinamica.com.co/Domain Controllers/NS;
1> cn: NS;
1> distinguishedName: CN=NS,OU=Domain Controllers,DC=dinamica,DC=com,DC=co;
5> objectClass: top; person; organizationalPerson; user; computer;
1> name: NS;
I have found two accounts, Administrator who is an user account, and the
other account is a computer account called NS, but NS is the name of the
server where SQL Server is running.
What should i do?
I hope you can help. Thanks
Javier Espinosa
"William Wang[MSFT]" wrote:
> Hi Harrison,
> The relevent articles I could find are:
> 305971 Windows 2000 Server Prompts Domain User for Credentials
> http://support.microsoft.com/?id=305971
> 811889 HOW TO: Troubleshoot the "Cannot Generate SSPI Context" Error Message
> http://support.microsoft.com/?id=811889
> HTH!
> Sincerely,
> William Wang
> Microsoft Online Partner Support
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --
> >Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
> <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
> <lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl>
> >Subject: Re: KDC Problem
> >Date: Wed, 23 Mar 2005 08:32:22 -0500
> >Lines: 155
> >Organization: Audio Visual Innovations, Inc.
> >X-Priority: 3
> >X-MSMail-Priority: Normal
> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >X-RFC2646: Format=Flowed; Original
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >Message-ID: <Oi9BAz6LFHA.3328@.TK2MSFTNGP14.phx.gbl>
> >Newsgroups: microsoft.public.sqlserver.server
> >NNTP-Posting-Host: 208.5.55.190
> >Path:
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
> 4.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382949
> >X-Tomcat-NG: microsoft.public.sqlserver.server
> >
> >William:
> >
> >Thanks for replying to my post. Do you know of any tech net articles
> which
> >may explain this behavior. The reason I ask is due to the sensitive
> nature
> >of SQL we are going to have a meeting before we attempt any changes.
> >Thanks.
> >
> >Harrison Midkiff
> >"William Wang[MSFT]" <v-rxwang@.online.microsoft.com> wrote in message
> >news:lcT4rWsLFHA.1376@.TK2MSFTNGXA02.phx.gbl...
> >> Hi Harrison,
> >>
> >> You may want to restart the SQL Server service after you have removed the
> >> duplicate SPN. If the SPN is re-added, remove the other SPN and then
> >> restart the SQL Server service.
> >>
> >> Feel free to let me know if this resolves your problem.
> >>
> >> Sincerely,
> >>
> >> William Wang
> >> Microsoft Online Partner Support
> >>
> >> When responding to posts, please "Reply to Group" via your newsreader so
> >> that others may learn and benefit from your issue.
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> --
> >>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
> >>References: <uHsGc7jKFHA.2764@.tk2msftngp13.phx.gbl>
> >> <AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com>
> >> <#mEsdElKFHA.604@.TK2MSFTNGP10.phx.gbl>
> >> <3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com>
> >>Subject: Re: KDC Problem
> >>Date: Thu, 17 Mar 2005 13:03:45 -0500
> >>Lines: 254
> >>Organization: Audio Visual Innovations, Inc.
> >>MIME-Version: 1.0
> >>Content-Type: multipart/alternative;
> >> boundary="--=_NextPart_000_012E_01C52AF1.C085DB50"
> >>X-Priority: 3
> >>X-MSMail-Priority: Normal
> >>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >>Message-ID: <O3FTruxKFHA.1156@.TK2MSFTNGP09.phx.gbl>
> >>Newsgroups: microsoft.public.sqlserver.server
> >>NNTP-Posting-Host: 208.5.55.183
> >>Path:
> >>
> TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP0
> >> 9.phx.gbl
> >>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.sqlserver.server:382241
> >>X-Tomcat-NG: microsoft.public.sqlserver.server
> >>
> >>Aleksandar:
> >>Thanks for replying to my post.
> >>The error which was appearing on the SQL Enterprise Manager was, "Unable
> >> to initialize SSPI context".
> >>Any suggestions?
> >>Harrison Midkiff
> >>"Aleksandar Grbic" <AleksandarGrbic@.discussions.microsoft.com> wrote in
> >> message news:3DA4EE90-C742-482D-B063-C81B448C47E1@.microsoft.com...
> >> try with setspn tool
> >>
> >> or
> >>
> >> 1. use adsiedit.msc and show servicePrincipalName for your sql server
> >
> >> (computer account)
> >>
> >> 2. use ldp.exe and search for "servicePrincipalName=MSSQLSvc/elvis*"
> >> delete duplicated spn
> >>
> >> -- -- "Within a few minutes I had problems with connections to SQL. "
> >
> >> what? error message'
> >>
> >>
> >>
> >>
> >> "Harrison Midkiff" wrote:
> >>
> >> Peter:
> >>
> >> Thanks for replying to my post.
> >>
> >> This is the article I followed which allowed me to find the duplicate
> >> but is
> >> was on a user account not a computer account. I think perhaps SQL has
> >> something in it hard coded to reference this user account.
> >>
> >> Any suggestions welcome...
> >>
> >> Harrison Midkiff
> >> "Peter 'Not Peter The Spate' Nolan"
> >> <PeterNotPeterTheSpateNolan@.discussions.microsoft.com> wrote in
> message
> >> news:AEC55981-252F-4AF5-B46A-BCC8C71F330E@.microsoft.com...
> >> > Have a look at
> >> > http://support.microsoft.com/default.aspx?scid=kb;en-us;321044
> >> >
> >> > Peter
> >> >
> >> > "Do not awake the sleeping dragon for you are crunchy and taste good
> >> with
> >> > ketchup".
> >> > Peter The Spate
> >> >
> >> > "Harrison Midkiff" wrote:
> >> >
> >> >> Hello:
> >> >>
> >> >> A while back I started getting KDC errors in my System log on my
> >> domain
> >> >> controller. The error is:
> >> >>
> >> >> Event Type: Error
> >> >> Event Source: KDC
> >> >> Event Category: None
> >> >> Event ID: 11
> >> >> Date: 3/16/2005
> >> >> Time: 9:34:08 AM
> >> >> User: N/A
> >> >> Computer: TPADC1
> >> >> Description:
> >> >> There are multiple accounts with name
> >> MSSQLSvc/elvis.aviinc.local:1433 of
> >> >> type 10.
> >> >>
> >> >> After researching this I did a "ldifde" dump of the active
> directory
> >> >> database and then searched the dump and found a double entry for
> >> >> "MSSQLSvc/elvis.aviinc.local:1433". I found it duplicated on one
> of
> >> the
> >> >> domain admins accounts. Since this appeared to be a duplicate I
> >> decided
> >> >> to
> >> >> delete it. Within a few minutes I had problems with connections to
> >> SQL.
> >> >> I
> >> >> put it back right away and then everything was working fine again.
> >> >> Obviously the SQL server has some kind of a link to this...
> >> >>
> >> >> I have done some searching but have not found anything on it. Does
> >> >> anyone
> >> >> have any suggestions on cleaning this up?
> >> >>
> >> >> Harrison Midkiff
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
> >>
> >>
> >
> >
> >
>
Posted by depredationnmqp at 2:45 AM 0 comments
Labels: , , , , , , , , , , , , , , , ,

KDC Error

Hello:
I am getting a KDC error on my domain controllers system log. The error is
below.
Event Source: KDC
Event ID: 11
Description:
There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433"
of type 10.
I have tracked this down to one of the developers domain admin accounts. It
is the "servicePrincipalName" on his account. This is the same
"servicePrincipalName" as the SQL server. I research this before and it was
thought perhaps he had install SQL under this account or at one point SQL
was running under this account. When I removed it SQL basically shutdown.
I immediately put it back. Later someone told me I should have just stopped
and restarted the SQL service and it would have corrected the problem.
Can anyone give me any input on this? This is a major production server and
I want to be very careful.
Harrison MidkiffHi
I am not sure about what the cause of this problem is, but the solution may
be to create a new service account, set SQL Server to use this account,
stop/restart SQL server at a scheduled time. Changing the old service accoun
t
should then not effect the SQL Server.
John
"Harrison Midkiff" wrote:

> Hello:
> I am getting a KDC error on my domain controllers system log. The error i
s
> below.
> Event Source: KDC
> Event ID: 11
> Description:
> There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433
"
> of type 10.
> I have tracked this down to one of the developers domain admin accounts.
It
> is the "servicePrincipalName" on his account. This is the same
> "servicePrincipalName" as the SQL server. I research this before and it w
as
> thought perhaps he had install SQL under this account or at one point SQL
> was running under this account. When I removed it SQL basically shutdown
.
> I immediately put it back. Later someone told me I should have just stopp
ed
> and restarted the SQL service and it would have corrected the problem.
> Can anyone give me any input on this? This is a major production server a
nd
> I want to be very careful.
> Harrison Midkiff
>
>|||Hi Harrison ,
This issue can occur if SQL accout is changed from Machine account to
service account. The SPN for the machine account was not removed from the
domain.
I suggest that you use LDIFDE to export the domain to text file and seach
for MSSQLSVC.
Syntax was:
LDIFDE -d DC=DEFIANT,DC=pactsolutions,DC=com, DC=au -f c:\export.txt
After you locate the duplicate SPN, you can use the Adsiedit.msc tool to go
to the object, view the duplicate SPN value, and remove the duplicate SPN
value. To determine which one was the one in current use, please delete one
of the
MSSQLSvc/uohssrv1.uohs.uottawa.ca:1433 SPNs, then restarted the SQL
service(s).
The SQL service will re-add the SPN on the currently in use service
account. If it is not readded, then the duplicate has been removed.
You can refer to the following article for more related information about
Kerberos Terminology and Service Principle Name (SPN).
811889.KB.EN-US HOW TO: Troubleshoot the "Cannot Generate SSPI Context"
Error Message
http://support.microsoft.com/defaul...KB;EN-US;811889
Hope this helps.
Best regards,
Vincent Xu
Microsoft Online Partner Support
========================================
==============
Get Secure! - www.microsoft.com/security
========================================
==============
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
========================================
==============
This posting is provided "AS IS" with no warranties,and confers no rights.
========================================
==============
--[vbcol=seagreen]
is[vbcol=seagreen]
"MSSQLSvc/computer.domain.local:1433"[vbcol=seagreen]
It[vbcol=seagreen]
was[vbcol=seagreen]
shutdown.[vbcol=seagreen]
stopped[vbcol=seagreen]
and[vbcol=seagreen]
Posted by depredationnmqp at 2:45 AM 0 comments
Labels: , , , , , , , , , , , , , , , , , ,

KDC Error

Hello:
I am getting a KDC error on my domain controllers system log. The error is
below.
Event Source: KDC
Event ID: 11
Description:
There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433"
of type 10.
I have tracked this down to one of the developers domain admin accounts. It
is the "servicePrincipalName" on his account. This is the same
"servicePrincipalName" as the SQL server. I research this before and it was
thought perhaps he had install SQL under this account or at one point SQL
was running under this account. When I removed it SQL basically shutdown.
I immediately put it back. Later someone told me I should have just stopped
and restarted the SQL service and it would have corrected the problem.
Can anyone give me any input on this? This is a major production server and
I want to be very careful.
Harrison MidkiffHi
I am not sure about what the cause of this problem is, but the solution may
be to create a new service account, set SQL Server to use this account,
stop/restart SQL server at a scheduled time. Changing the old service account
should then not effect the SQL Server.
John
"Harrison Midkiff" wrote:
> Hello:
> I am getting a KDC error on my domain controllers system log. The error is
> below.
> Event Source: KDC
> Event ID: 11
> Description:
> There are multiple accounts with name "MSSQLSvc/computer.domain.local:1433"
> of type 10.
> I have tracked this down to one of the developers domain admin accounts. It
> is the "servicePrincipalName" on his account. This is the same
> "servicePrincipalName" as the SQL server. I research this before and it was
> thought perhaps he had install SQL under this account or at one point SQL
> was running under this account. When I removed it SQL basically shutdown.
> I immediately put it back. Later someone told me I should have just stopped
> and restarted the SQL service and it would have corrected the problem.
> Can anyone give me any input on this? This is a major production server and
> I want to be very careful.
> Harrison Midkiff
>
>|||Hi Harrison ,
This issue can occur if SQL accout is changed from Machine account to
service account. The SPN for the machine account was not removed from the
domain.
I suggest that you use LDIFDE to export the domain to text file and seach
for MSSQLSVC.
Syntax was:
LDIFDE -d DC=DEFIANT,DC=pactsolutions,DC=com, DC=au -f c:\export.txt
After you locate the duplicate SPN, you can use the Adsiedit.msc tool to go
to the object, view the duplicate SPN value, and remove the duplicate SPN
value. To determine which one was the one in current use, please delete one
of the
MSSQLSvc/uohssrv1.uohs.uottawa.ca:1433 SPNs, then restarted the SQL
service(s).
The SQL service will re-add the SPN on the currently in use service
account. If it is not readded, then the duplicate has been removed.
You can refer to the following article for more related information about
Kerberos Terminology and Service Principle Name (SPN).
811889.KB.EN-US HOW TO: Troubleshoot the "Cannot Generate SSPI Context"
Error Message
http://support.microsoft.com/default.aspx?scid=KB;EN-US;811889
Hope this helps.
Best regards,
Vincent Xu
Microsoft Online Partner Support
======================================================Get Secure! - www.microsoft.com/security
======================================================When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================This posting is provided "AS IS" with no warranties,and confers no rights.
======================================================>>Reply-To: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>From: "Harrison Midkiff" <HMidkiff@.aviinc.com>
>>Subject: KDC Error
>>Date: Thu, 11 May 2006 19:00:26 -0400
>>Lines: 25
>>Organization: Audio Visual Innovations, Inc.
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>>X-RFC2646: Format=Flowed; Original
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>>Message-ID: <eVgny6UdGHA.3348@.TK2MSFTNGP03.phx.gbl>
>>Newsgroups: microsoft.public.sqlserver.server
>>NNTP-Posting-Host: 208.5.55.190
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.server:431203
>>X-Tomcat-NG: microsoft.public.sqlserver.server
>>Hello:
>>I am getting a KDC error on my domain controllers system log. The error
is
>>below.
>>Event Source: KDC
>>Event ID: 11
>>Description:
>>There are multiple accounts with name
"MSSQLSvc/computer.domain.local:1433"
>>of type 10.
>>I have tracked this down to one of the developers domain admin accounts.
It
>>is the "servicePrincipalName" on his account. This is the same
>>"servicePrincipalName" as the SQL server. I research this before and it
was
>>thought perhaps he had install SQL under this account or at one point SQL
>>was running under this account. When I removed it SQL basically
shutdown.
>>I immediately put it back. Later someone told me I should have just
stopped
>>and restarted the SQL service and it would have corrected the problem.
>>Can anyone give me any input on this? This is a major production server
and
>>I want to be very careful.
>>Harrison Midkiff
>>
Posted by depredationnmqp at 2:45 AM 0 comments
Labels: , , , , , , , , , , , , , , ,

KDC error

Hi,
Since I have restored the MSDB database I have been
getting the following error:
Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 11
Date: 07/12/2003
Time: 10:10:02:PM
User: N/A
Computer: SERVER1
Description:
There are multiple accounts with name
MSSQLSvc/SERVER1.DOMAIN.com:1433 of type 10.
does anyone know what this error is? every time I get this
there are 10 occurances within a 1minute period.
the SQL server is SQL Server 2000 SP2, on a Windows 2000
SP3 Server.
any help will be much appreciated| Hi,
|
| Since I have restored the MSDB database I have been
| getting the following error:
|
| Event Type: Error
| Event Source: KDC
| Event Category: None
| Event ID: 11
| Date: 07/12/2003
| Time: 10:10:02:PM
| User: N/A
| Computer: SERVER1
| Description:
| There are multiple accounts with name
| MSSQLSvc/SERVER1.DOMAIN.com:1433 of type 10.
|
| does anyone know what this error is? every time I get this
| there are 10 occurances within a 1minute period.
|
| the SQL server is SQL Server 2000 SP2, on a Windows 2000
| SP3 Server.
|
| any help will be much appreciated
--
This error is not related to MSDB. This error is related to the service
principle name (spn). Maybe the spn for SQL Server is not registered with
Active Directory.
Some information about SPNs:
HOW TO: Troubleshoot the "Cannot Generate SSPI Context" Error Message
http://support.microsoft.com/?id=811889
For more details please speak with your domain administrator.
Hope this helps,
--
Eric Cárdenas
SQL Server support
Posted by depredationnmqp at 2:44 AM 0 comments
Labels: , , , , , , , , , , , , , ,
Subscribe to: Posts (Atom)