Figured it out! It was actually two groups of duplicates. For some reason there were two different ones registered under two different accounts.
On Wed, Oct 26, 2011 at 12:08 PM, Cameron <[email protected]> wrote: > Good morning all, > > I'm trying to get an error sorted out and need confirmation from one of you > fine folks! > > Win2k8r2 > Error: The KDC encountered duplicate names while processing a Kerberos > authentication request. The duplicate name is MSSQLSvc/ > server.domain.ca:1433 (of type DS_SERVICE_PRINCIPLE_NAME). This may result > in authentication failures or downgrades to NTLM. In order to prevent this > from occuring remove the duplicate entries for MSSQLSvc/ > server.domain.ca:1433 in Active Directory. > > So with all the reading that I've been doing, I found the following. > - logged into the offending server > - ran the following command >setspn -X > > the output shows two entries for MSSQLSvc > 1. MSSQLSvc/server.domain.ca:1433 > 2. MSSQLSvc/server.domain.ca > > This machine is running SQL 2008r2 > > I'm thinking the one I need to remove is #2, but would like a second > opinion! > > As always, TIA! > > Cameron > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
