PVS server cannot logon database with Error "The Login is from an Untrusted Domain and Cannot ..."

PVS server cannot logon database with Error "The Login is from an Untrusted Domain and Cannot ..."

book

Article ID: CTX579940

calendar_today

Updated On:

Description

  • PVS server console cannot be launched with error: "The database login failed."
  • SQL server log error:
    • "Login failed. The login is from an untrusted domain and cannot be used with Integrated authentication."
    • "SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. The logon attempt failed."

Resolution

Disclaimer: Below address is lab information.

1.Run CMD ad administrator on domain controller
2.Add Alwayson Listener SPN via below command:
Setspn -A MSSQLSvc/<ListnerHostname.domain.com:port> <domain>\<sqlserver service account>
Example:
Setspn -A MSSQLSvc MSSQLSvc/mylistener.test.lab:1433 test\administrator

Problem Cause

SQL Server Alwayson Listener SPN is missing. From network trace, it can be checked with error code eRR-S-PRINCIPAL-UNKNOWN
image.png
SPN can also be checked command:

Setspn -L domainName\Sql server service account