Kerberos authentication fails

From: raul (raultruco_at_flashmail.com)
Date: 06/09/04 

Date: 9 Jun 2004 06:39:30 -0700

Hello,

We have a problem autenticating a user between 2 machines in the same
domain with Kerberos. I'll try to explain our scenario.

We have a Windows 2003 Server (Enterprise Edition) acting as Domain
Controller with Sql Server 2000 Sp3 running on it. Sql Server process
runs with a custom uesr domain account (SqlCustomUser) (no
Localsystem account). In the same domain we have another Windows 2003
Server with a custom Windows Service (developed with .Net) which runs
with another domain user account (ServiceCustomUser). We have
configure the Sql Server to grant access to this service user and the
service connects to Sql Server using Windows Autentication.

When our service try to connect to a d.b., Kerberos authentication
fails after 1-2 minutes, and finally the conection is stablished using
NTLM. This is our conclusion after reading several articles and forums
of the web. We have tried several workarounds (Delegation, creation of
'Service Principal Names' with SetSpn.exe, ...) but we haven't get it
yet.

Any idea will be well appreciated

Raśl Truco,

More info: There isn't any firewall, the network is a standar
ethernet, and if we use Sql Autentication all works ok.

Relevant Pages

  • Kerberos authentication fails
    ... We have a Windows 2003 Server acting as Domain ... Controller with Sql Server 2000 Sp3 running on it. ... service connects to Sql Server using Windows Autentication. ... When our service try to connect to a d.b., Kerberos authentication ...
    (microsoft.public.sqlserver)
  • setup kerberos authentication for SQL Server 2000
    ... I need some help to setup Kerberos Authentication for SQL Server ... My workstation and server are both Windows 2000 and I believe by ...
    (comp.databases.ms-sqlserver)
  • Re: Kerberos authentication fails
    ... kerberos process - not that I could interpret the results --- Steve ... > service connects to Sql Server using Windows Autentication. ...
    (microsoft.public.sqlserver)
  • Re: Kerberos authentication fails
    ... kerberos process - not that I could interpret the results --- Steve ... > service connects to Sql Server using Windows Autentication. ...
    (microsoft.public.win2000.security)
  • Service Account Authentication via Kerberos
    ... SPN's and how SQL Server 2000 will default to using NTLM as a Windows ... Authentication method by default. ... how to you make SQL Server 2000 use kerberos as its windows ...
    (microsoft.public.sqlserver.security)