Re: Kerberos authentication fails

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 06/09/04 

Date: Wed, 09 Jun 2004 19:20:37 GMT

I don't know what the problem is but if you have not done such you may want to
enable kerberos logging to give you more detail of what is going on in the
kerberos process - not that I could interpret the results --- Steve

http://support.microsoft.com/?id=262177

"raul" <raultruco@flashmail.com> wrote in message
news:67a710d7.0406090539.6bd9a4a8@posting.google.com...
> Hello,
>
> We have a problem autenticating a user between 2 machines in the same
> domain with Kerberos. I'll try to explain our scenario.
>
> We have a Windows 2003 Server (Enterprise Edition) acting as Domain
> Controller with Sql Server 2000 Sp3 running on it. Sql Server process
> runs with a custom uesr domain account (SqlCustomUser) (no
> Localsystem account). In the same domain we have another Windows 2003
> Server with a custom Windows Service (developed with .Net) which runs
> with another domain user account (ServiceCustomUser). We have
> configure the Sql Server to grant access to this service user and the
> service connects to Sql Server using Windows Autentication.
>
> When our service try to connect to a d.b., Kerberos authentication
> fails after 1-2 minutes, and finally the conection is stablished using
> NTLM. This is our conclusion after reading several articles and forums
> of the web. We have tried several workarounds (Delegation, creation of
> 'Service Principal Names' with SetSpn.exe, ...) but we haven't get it
> yet.
>
> Any idea will be well appreciated
>
> Raśl Truco,
>
> More info: There isn't any firewall, the network is a standar
> ethernet, and if we use Sql Autentication all works ok.

Relevant Pages

  • Re: View Type of Protocol
    ... Thanks a lot for the feedback John. ... information about the type of authentication being used. ... some reason Kerberos is not available. ... they are not authenticated and the SQL Server login fails. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Kerberos and ASP NET application
    ... First time poster to this group,and this is my first experience ... looking into the intricacies of Kerberos. ... NTLM and the SQL server won't let them in (ERROR message ... client is IE7 on Win XP SP2 - and enable integrated authentication ...
    (microsoft.public.inetserver.iis.security)
  • Re: sql2005/linked server+imperonate
    ... When you go from the first SQL Server to the second SQL ... Active Directory attempts to use Kerberos as the authentication method first. ... so through delegation, but you have to do some setup. ...
    (microsoft.public.de.sqlserver)
  • Kerberos authentication fails
    ... We have a Windows 2003 Server acting as Domain ... Controller with Sql Server 2000 Sp3 running on it. ... service connects to Sql Server using Windows Autentication. ... When our service try to connect to a d.b., Kerberos authentication ...
    (microsoft.public.sqlserver)
  • Kerberos authentication fails
    ... We have a Windows 2003 Server acting as Domain ... Controller with Sql Server 2000 Sp3 running on it. ... service connects to Sql Server using Windows Autentication. ... When our service try to connect to a d.b., Kerberos authentication ...
    (microsoft.public.win2000.security)