RE: Active Directory Group & SQL Server 2000

From: Vincent Daglia (v.daglia_at_forum.online.ch)
Date: 06/18/04

Next message: Umut Nazlica: "RE: How do people use SQL in Win authenticated mode only?"
Previous message: Yan-Hong Huang[MSFT]: "RE: Sync SQLServer Agent password with domain"
In reply to: Kevin McDonnell [MSFT]: "RE: Active Directory Group & SQL Server 2000"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Fri, 18 Jun 2004 10:09:25 +0200

Allready done :(

In addition we have applied "Windows Server 2003 - Troubleshooting Kerberos Delegation" documentation.

With Netdiag.exe I get the following error :

Kerberos test. . . . . . . . . . . : Failed
[FATAL] Kerberos does not have a ticket for host/grenache.abissa.ch

For information SPNs entry on our AD server are :

    HOST/grenache.abissa.ch
    HOST/grenache
    MSSQLSvc/grenache.abissa.ch:1433
    MSSQLSvc/grenache:1433

Any other ideas?

--
Vincent Daglia
ABISSA Informatique SA
Switzerland
	
>>> Kevin McDonnell [MSFT]<kevmc@online.microsoft.com> 17.06.2004 23:30:38 >>>
You may want to check the client's ability to resolve the groups on the 
server.
netdiag.exe can be used to test client connectivity with the DC and DNS 
name resolution.
321708 HOW TO: Use the Network Diagnostics Tool (Netdiag.exe) in Windows 
2000
http://support.microsoft.com/?id=321708 
Run it with the /v (verbose) flag.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.

Next message: Umut Nazlica: "RE: How do people use SQL in Win authenticated mode only?"
Previous message: Yan-Hong Huang[MSFT]: "RE: Sync SQLServer Agent password with domain"
In reply to: Kevin McDonnell [MSFT]: "RE: Active Directory Group & SQL Server 2000"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]