Avatar of Dan
Dan
Flag for United States of America asked on

The target principal name is incorrect. Cannot generate SSPI context.

I'm getting an error when trying to connect to my database server.


I'm using SQL server reporting services, and my DB admin created a report to test the connection.

Starting today, my SQL server reporting services are not working.

I get this error message:

The report server couldn't connect to the data source using the information you entered. Make sure you've entered the connection string and any credentials correctly.

Hide error details The target principal name is incorrect. Cannot generate SSPI context.


I have tried this form different work stations, still get the same error.


I double checked my company firewall and it's not blocking the traffic.

I ran a wireshark on the db1 server, the client initiating the transaction and I see from the wireshark that the domain controller it connects to first is not allowing the connection.

The specific error is: KRB error: KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN

I looked this up online, but can't find much.

Every stream I looked at in wireshark shows me the same thing.  So something on my DC is not allowing this traffic.



Windows Server 2012Microsoft SQL Server

Avatar of undefined
Last Comment
Dan

8/22/2022 - Mon
David Johnson, CD

sounds like windows integrated login (Kerberos error) and the username is not in AD
Dan

ASKER
I tried with my domain account, domain admin and it's still not working.
David Johnson, CD

in the sql server instance that has reporting services does your account have a matching sql login?  Can you in ssms login to that account?
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
Dan

ASKER
That user account does exist in my AD. It all started when I switched my ipsec VPN, site to site from my old firewall to the new.

ASKER CERTIFIED SOLUTION
Dan

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.