Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

DS_SERVICE_PRINCIPAL_NAME Event 11

Posted on 2009-07-09
1
Medium Priority
?
1,115 Views
Last Modified: 2012-06-27
I'm running into the DS_SERVICE_PRINCIPAL_NAME KDC Event 11 and I would appreciate some expert help resolving it.
I'm running a server 2003 domain. The host in question is server 2003 and running one instance of SQL 2005 and another of SQL 2000 and the error applies to the common SQL account that runs both instances.

I tried using methods 1 and 3 outlined at http://support.microsoft.com/kb/321044. I have to admit I'm not familiar with these tools or how to use the results. I tried using both ports 389 or 3268.  The exact error is MSSQLSvc/Host.Domain.org:1433 of type DS_SERVICE_PRINCIPAL_NAME.

Searching MSSQLSvc/MyServer.Domain.org:1433 returns a ton of results, from several servers and varied port numbers.

CN=SQLService,CN=....
Class: user
User Logon: SQLService
-- MSSQLSvc/MyServer.Domain.org:1401
-- MSSQLSvc/MyServer.Domain.org:1433
-- MSSQLSvc/MyServer.,Domain.org:1401
-- MSSQLSvc/AnotherServer.Domain.org:1433
....

User Logon: AUser
-- MSSQLSvc/MyServer.Host.Domain.org:1433
0
Comment
Question by:timbrigham
1 Comment
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 2000 total points
ID: 24816086
The SPN shall be unique and only exist on one single account, in this case the service account running SQL Server on MyServer.
Use setspn and remove the duplicated SPN from the accounts that shall not have the SPN

setspn -D MSSQLSvc/MyServer.Domain.Org:1433 accountname

The method I prefer is to use dsquery (similar to ldifde method) is to use dsquery.
dsquery * -filter (serviceprincipalname=<serchedSPN>) -attr name
or
dsquery * -filter (serviceprincipalname=<serchedSPN>) -attr name serviceprincipalname
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
The article explains the process to deploy a Self-Service password reset portal I developed a few years ago. Hopefully, it will prove useful to someone.  Any comments, bug reports etc. are welcome...
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

575 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question