If that service account is only for sql and not in use, I would delete it, let replication work and then recreate it….
From: [email protected] [mailto:[email protected]] On Behalf Of Brian McDonald Sent: Sunday, March 29, 2015 2:41 PM To: [email protected] Subject: Re: [mssms] SPN issue Sorry, that was a typo. I entered the command as you have indicated below. ADSI Edit shows the same exact output as provided with the ldife query for the computer account. servicePrincipalName: CmRcService/CMSRV01 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local servicePrincipalName: TERMSRV/CMSRV01 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local servicePrincipalName: WSMAN/CMSRV01 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local servicePrincipalName: RestrictedKrbHost/CMSRV01 servicePrincipalName: HOST/CMSRV01 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local servicePrincipalName: HOST/CMSRV01.COMPANY.local However, the service account is blank with the servicePrincipalName attribute. Is there a way to fix this via ADSIEdit? Still not sure why this would say ‘Duplicate SPN found…” From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Brian McDonald Sent: Sunday, March 29, 2015 2:11 PM To: [email protected] <mailto:[email protected]> Subject: Re: [mssms] SPN issue Thanks sir, here is the output: dn: CN=CMSRV01,OU=Servers,DC=COMPANY,DC=local changetype: add servicePrincipalName: CmRcService/CMSRV01 servicePrincipalName: CmRcService/CMSRV01.COMPANY.local servicePrincipalName: TERMSRV/CMSRV01 servicePrincipalName: TERMSRV/CMSRV01.COMPANY.local servicePrincipalName: WSMAN/CMSRV01 servicePrincipalName: WSMAN/CMSRV01.COMPANY.local servicePrincipalName: RestrictedKrbHost/CMSRV01 servicePrincipalName: HOST/CMSRV01 servicePrincipalName: RestrictedKrbHost/CMSRV01.COMPANY.local servicePrincipalName: HOST/CMSRV01.COMPANY.local From: Thomas Gonzalez <[email protected] <mailto:[email protected]> > Date: March 29, 2015 at 12:48:06 PM CDT To: <[email protected] <mailto:[email protected]> > Subject: RE: [mssms] SPN issue Reply-To: [email protected] <mailto:[email protected]> Also try this ldifde -f check_SPN.txt -t 3268 -d "" -l servicePrincipalName -r "(servicePrincipalName=HOST/mycomputer*)" -p subtree Thomas Gonzalez _____ From: Brian McDonald <mailto:[email protected]> Sent: 3/29/2015 12:17 PM To: [email protected] <mailto:[email protected]> Subject: [mssms] SPN issue Hello all, I'm experiencing an issue with registering SPNs for SQL on my CM server. The commands I'm running: Setspn -a MSSQLSvc\Server:1433 Domain\cmsql Setspn -a MSSQLSvc\Server.fqdn:1433 Domain\cmsql When running the above commands I receive: "Duplicate SPN found, aborting operation!" I noticed though it shows "checking domain...and it has the cmra account, which is my reporting services account. When I attempt to run setspn -l domain\cmsql it doesn't show anything when it searches. If I run setspn -x it tells me found 0 group of duplicate SPNs. Does anyone have any ideas what might be the issue here? I'm trying to implement a new management point and it's telling me that the SPNs have not been registered. Thanks! Brian Sent from my iPhone _____ <http://> <imaged3b81e.JPG> Rich Coulter Senior System Administrator Brownells, Inc. 200 S. Front Street, Montezuma, IA 50171 Email: [email protected] <mailto:[email protected]> Phone: 641-623-5401 Direct: 641-623-8018 Cell:641-204-1980 Join us on Facebook <http://www.facebook.com/BrownellsInc> and Twitter <http://www.twitter.com/brownellsinc> <image10d78c.JPG><image42352a.JPG> _____ <imagea7a99e.JPG><image2b3f3e.JPG>
