The target principal name is incorrect

Marcin Woszczyna 0

Hi Team, I've got the error "The target principal name is incorrect. Cannot generate SSPI context" when I tried to connect to SQL Server from other server.

I've checked sql logs and I found info SPN was registered . I've run Kerberos Configuration Manager and I got error TCP must be enabled. I checked SQL Configuration Manager and TCP is enabled. Can somebody help me , where issue is?

Ps. I've logged in by used IP address

Erland Sommarskog 113.5K Reputation points MVP

2024-05-06T20:53:40.7066667+00:00

Which versions of SQL Server are involved?
Marcin Woszczyna 0 Reputation points

2024-05-06T21:33:13.5+00:00

MSSQL 2016 version
MikeyQiaoMSFT-0444 3,190 Reputation points

2024-05-07T02:06:42.8966667+00:00

Have you added the port to the end of the FQDN on the spn for the svc account running MSSQLSvc

MSSQLSvc/<FQDN>:<port> MSSQLSvc/<FQDN>：<port>

The provider-generated, default SPN when TCP is used. <port> is a TCP port number.

Marcin Woszczyna 0

I executed sql check tool and I received below output

Suggested SPN Exists Status

------------------------------------  ------  -------------------

MSSQLSvc/hostname.domain:1433  True    Okay               

MSSQLSvc/hostname.domain       True    Okay               

MSSQLSvc/hostname:1433             False   SPN does not exist.

MSSQLSvc/hostname                  False   SPN does not exist.

MikeyQiaoMSFT-0444 3,190 Reputation points

2024-05-07T09:39:12.2266667+00:00

Did you use the FQDN when connecting? I suggest you follow the steps in the article to troubleshoot.

https://learn.microsoft.com/en-us/troubleshoot/sql/database-engine/connect/cannot-generate-sspi-context-error

1 answer

MikeyQiaoMSFT-0444 3,190 Reputation points

2024-05-23T09:21:21.2566667+00:00

Hi，Marcin Woszczyna

This issue may be caused by the SPN not being configured successfully

Refer to

https://learn.microsoft.com/en-us/troubleshoot/sql/database-engine/connect/explicit-spn-is-misplaced?source=recommendations

Best Regards,

Mikey Qiao

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

The target principal name is incorrect

1 answer

Your answer