PVS server cannot logon database with Error "The Login is from an Untrusted Domain and Cannot ..."

book

Article ID: CTX579940

calendar_today

Updated On:

Description

  • PVS server console cannot be launched with error: "The database login failed."
  • SQL server log error:
    • "Login failed. The login is from an untrusted domain and cannot be used with Integrated authentication."
    • "SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. The logon attempt failed."

Resolution

Disclaimer: Below address is lab information.

1.Run CMD ad administrator on domain controller
2.Add Alwayson Listener SPN via below command:
Setspn -A MSSQLSvc/<ListnerHostname.domain.com:port> <domain>\<sqlserver service account>
Example:
Setspn -A MSSQLSvc MSSQLSvc/mylistener.test.lab:1433 test\administrator

Problem Cause

SQL Server Alwayson Listener SPN is missing. From network trace, it can be checked with error code eRR-S-PRINCIPAL-UNKNOWN
image.png
SPN can also be checked command:

Setspn -L domainName\Sql server service account