A Kerberos Error Message Was Received
Contents |
(Русский)ישראל (עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) HomeLibraryLearnDownloadsTroubleshootingCommunityForums Ask a question Quick access Forums home Browse forums users FAQ Search related threads Remove From My Forums Answered by: Kerberos errors in event log SQL Server > SQL Server Reporting Services, Power View Question a kerberos error message was received on logon session 0 Sign in to vote SQL 2012 Every time I run a Reporting
A Kerberos Error Message Was Received On Logon Session Client Time
Services report, via our website, I get an entry in the Reporting Service Server's System Event Log. The error is a kerberos error message was received 0x7 kdc_err_s_principal_unknown this: A Kerberos Error Message was received: on logon session Client Time: Server Time: 3:25:52.0000 4/22/2013 Z Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN Extended Error: 0xc0000035 KLIN(0) Client Realm: Client Name: Server Realm:myDomain Server Name: error code 0xd kdc err badoption MSSQLSvc/mySQLServer:1433 Target Name: MSSQLSvc/mySQLServer:1433@myDomain Error Text: File: 9 Line: f09 Error Data is in record data. The EventID is 3 and the Source is Security-Kerberos. The report renders just fine, so this seems to be more of an informational message than an error. What can I do to get rid of the error? Thanks in advance, Andre André Monday, April 22, 2013 3:31 AM Reply |
Error Code 0x7 Kdc Err S Principal Unknown
Quote Answers 0 Sign in to vote Hey - What you need to do is check for duplicate SPN's, and if none are found then you need to create the SPN for the SQL Service. http://blog.juventusconsulting.com/hunting-duplicate-spns/ http://msdn.microsoft.com/en-us/library/ms191153.aspx I'd read up on Kerberos authentication before you start ripping out SPN's - might do more harm than good :) Thanks! Josh Proposed as answer by Mike YinMicrosoft contingent staff, Moderator Tuesday, April 23, 2013 4:16 PM Marked as answer by Mike YinMicrosoft contingent staff, Moderator Monday, April 29, 2013 11:06 AM Tuesday, April 23, 2013 4:08 AM Reply | Quote All replies 0 Sign in to vote What this error means is usually one of two things [1] The Service Principal Name for the service MSSQLSvc/mySQLServer:1433 is not configured or [2] You have duplicate SPN's defined. To get rid of the error you need to correctly configure Kerberos. Thanks! Josh Edited by Josh Ashwood Monday, April 22, 2013 5:48 AM Monday, April 22, 2013 5:47 AM Reply | Quote 0 Sign in to vote Thanks for the reply Josh. I'll be the first to admit I'm not a kerberos expert; heck I can barely spell it. I did fin
http://www.microsoft.com/info/copyright.htm! Kerberos Authentication Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN Extended Error: 0xc0000035 KLIN(0) ★★★★★★★★★★★★★★★ EMEADAXSupportOctober 29, 20100 0 0 0 We came across an issue recently where we are using a kerber Microsoft Dynamics AX 2009, and we have the Enterprise Portal Server (EP), Reporting error message is server not found in kerberos database Server and Analysis serverhad been configured to useKerberos Authentication as per the whitepaper "Configuring Kerberos Authentication with Role Centers", dated
A Kerberos Error Message Was Received Error Code 0x19 Kdc_err_preauth_required
February 2009. If we browse the Role Center pages from the EP server, we getNO errors in the KPI and Reporting web parts.However If we try an browse from a different server/desktop machine https://social.msdn.microsoft.com/Forums/sqlserver/en-US/63f7c6a7-6847-4728-a59b-7e3d1c1f0a46/kerberos-errors-in-event-log?forum=sqlreportingservices then we receive following error messages in the webparts: KPI-webparts: An error has occurred while establishing a connection to the analysis server Reporting Services Webpart: An error occurred while trying to display the report from the
message was received: on logon session Client Time: Server Time: 7:10:16.0000 5/28/2014 Z Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN Extended Error: 0xc0000035 KLIN(0) Client Realm: Client https://roger.steneteg.org/blog/kdc_err_s_principal_unknown-spn-duplicates Name: Server Realm: Example.com Server Name: MSSQLSvc/sql1.example.com:1433 Target Name: MSSQLSvc/sql1.example.com:1433@EXAMPLE.COM Error Text: http://www.uccorner.com/242/sharepoint/kdc_err_s_principal_unknown/ File: 9 Line: 12c4 Error Data is in record data. The extended error 0x0000035 means that it is an issue with duplicate Service Principal Names (SPN). I logged onto the sql1 server and ran setspn.exe with the -X parameter which searches for duplicates SPN. It gave error message the following result: PS C:\Windows\system32> setspn -X Checking domain DC=wipcorehosted,DC=local Processing entry 1 MSSQLSvc/sql1.example.com:1433 is registered on these accounts: CN=SQLSvc,OU=SQL,DC=example,DC=com CN=SQL1,OU=SQL,DC=example,DC=com found 1 group of duplicate SPNs. The SQL server was installed to run as local system, but later changed to run as the domain account SQLSvc, I guess that's what cause the duplicate SPNs. So I tried to a kerberos error remove the old SPN with setspn.exe: PS C:\Windows\system32> setspn -D MSSQLSvc/sql1.example.com:1433 sql1 Unregistering ServicePrincipalNames for CN=SQL1,OU=SQL,DC=example,DC=com MSSQLSvc/sql1.example.com:1433 Updated object But when I again search for duplicates with -X it still reported the same duplicate. After trying the delete command again a couple of times the duplicate was removed and the client servers stopped reporting the kerberos error. Comments Post comment Posted 2015-07-15 12:06:00 by john scott Roger, I am having the exact issue stated above. Only I've got 2 duplicates. I am removing both, and getting the same 'Updated object' message that you were getting. I've deleted both SPN's over a dozen times, and yet the setspn -x still shows the duplicate spn's... How long does it take to delete the duplicates, do I need to wait an hour or so? Or should it be immediate? Thank you 1 Search Categories Computer games Computer hardware Fun General How To's Software development System administration Uncategorized Tags CDN Certificates CSS Datetime Debian eBooks Elementary Firefox Gitlab Gnome IM jQuery KDE Lenovo Linux Macbooks Ma
2011(3) December 2010(3) November 2010(5) October 2010(4) September 2010(3) August 2010(2) June 2010(4) May 2010(4) March 2010(7) February 2010(3) January 2010(6) Recent posts Will Search be the new User Profile Service in Sharepoint 2013? Powershell script for moving content databases Powershell script for Timer Jobs What every Sharepoint'er should do Cascading Drop Down Multiple Levels Thanks! « Cascading Drop Down Sharepoint Foundation 2010 Review Samsung Wave II S8530 » KDC_ERR_S_PRINCIPAL_UNKNOWN I got this error in the event log on a fresh Sharepoint Server 2010 February Cumulative Update installation: A Kerberos Error Message was received: on logon session Client Time: Server Time: 17:6:26.0000 4/2/2011 Z Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN Extended Error: 0xc0000035 KLIN(0) Client Realm: Client Name: Server Realm: DOMAIN.LOCAL Server Name: MSSQLSvc/sqlserver.domain.local:1433 Target Name: MSSQLSvc/sqlserver.domain.local:1433@DOMAIN.LOCAL Error Text: File: 9 Line: f09 Error Data is in record data. Solution: The error is due to a dual SPN entry. I found this with ldifde -f dump_spn.txt -d "dc=domain,dc=local" -p subtree -r "(servicePrincipalName=MSSQLSvc/sharepointsql*)" -l servicePrincipalName I found that another account in addition to the SQL Server Service account had registered a SPN. This was removed with adsiedit.msc: Navigate to the correct OU/User, and remove the servicePrinicpalName entry. April 13th, 2011 | Tags: kerberos | Category: Sharepoint, Sharepoint 2010, SQL 4 comments to KDC_ERR_S_PRINCIPAL_UNKNOWN Joseph Marinaccio March 2, 2012 at 22:13 Thank you for the solution!! -marinaccio Morphus Dominus May 29, 2012 at 12:43 Great info!! You made my day! BTW: it occured to us, after changing the service user for SQL Server Service. We enabled auto registration for the SPN's to the service users… Mark Underhill February 19, 2013 at 15:05 Many thanks. I'd be searching for days for a solution to this problem without any hint that duplicates were the cause. Problem solved. Much appreciated. jason March 10, 2016 at 13:16 I may be dumb in asking this :-(, but why have