Cannot generate SSPI context – HELP! | SQL Server Performance Forums

SQL Server Performance Forum – Threads Archive

Cannot generate SSPI context – HELP!

I know there is an abundance of tech articles out there on this, but hope to get some pinpoint troubleshooting help.<br /><br />I can connect from my client/pc to network SQL Servers and my local server sql 2000 and 2005 via EM and SSM no problem. However an app that has been working ‘forever’ generates the above error trying to connect to my local.<br /><br />From my web app I get this:<br />Microsoft OLE DB Provider for ODBC Drivers (0x80004005)<br />[Microsoft][ODBC SQL Server Driver]Cannot generate SSPI context<br /><br />We did a physical move recently, and looks like the IP address may have changed, but everything except the app seems to be working.<br /><br />PLEASE HELP![<img src=’/community/emoticons/emotion-6.gif’ alt=’:(‘ />]
Did you change the SQL Server Service account on the server at any point? I have had this problem before, I went through the MS KB troubleshooting article, I did everything in there that it says, I never ever got to the bottom of it, I’m afraid.
I had the same issue resolved with the help of the following article… How to troubleshoot the "Cannot generate SSPI context" error message
http://support.microsoft.com/default.aspx/kb/811889
MohammedU.
Moderator
SQL-Server-Performance.com
THOMAS: Thx. I did change the SQL Service account to a network user, and gave it admin rights on the box, and looks like it also has the right policy user rights, (ie:Log on As A Service) and restarted it – but no help. What was your issue? MOHAMMEDU: There’s a lot of info in that KB, can you specify a likely cause?
UPDATE: I changed the sql service account back to the old one, and all works again.
So, the accounts have the same rights on the server, what could be the difference??
Yes, there is lot info… and it depends how to resolve the issue based on the server and config… My issue resolved with topic "How to configure the SQL Server service to create SPNs dynamically for the SQL Server instances" MohammedU.
Moderator
SQL-Server-Performance.com
quote:Originally posted by sql_jr THOMAS: Thx. I did change the SQL Service account to a network user, and gave it admin rights on the box, and looks like it also has the right policy user rights, (ie:Log on As A Service) and restarted it – but no help. What was your issue? MOHAMMEDU: There’s a lot of info in that KB, can you specify a likely cause?

Yes, changing the service account can be a cause of this issue. It’s all to do with kerberos…
If you follow all the steps in that KB article using the arcane command-line utils, it STILL doesn’t fix it.
]]>