Cannot connect to listener in SSMS

Veena Srinivas 251 Reputation points
2021-03-25T19:01:55.647+00:00

Hello,

When I try to connect to a AG listener using SSMS, I get the following error:

"The login is from an untrusted domain and cannot be used with integrated authentication"

I'm using a Domain account which has sys admin role.

Please help.

Thanks,
Veena S

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,815 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AmeliaGu-MSFT 13,961 Reputation points Microsoft Vendor
    2021-03-26T03:09:36.293+00:00

    Hi VeenaSrinivas-0229,

    You could try to disable the loopback check setting on machine as follows:

    1. Edit the Windows registry: Start –> Run > Regedit
    2. Navigate to: HKLM\System\CurrentControlSet\Control\LSA
    3. Add a DWORD value called “DisableLoopbackCheck”
    4. Set this value to 1

    If this solution doesn’t solve the issue, this issue might be cause by Kerberos and SPN issue.
    We need to use FQDN of Listener along with listener port to configure SPN for SQL Server Always On.
    You can use the following command in the command line to check if SPN for Listener is registered for SQL Server service account: 

    setspn –l accountname

    If it doesn’t exist, please configure the SPN for listener: 

    setspn -A MSSQLSvc/ <FQDN>: <port> accountname

    Please refer to this article and Register a SPN for Kerberos Connections which might help.
    Best Regards,
    Amelia

    If the answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread

    0 comments