target principal name is incorrect. cannot generate sspi context
I have recently upgraded from SQL 2008 to SQL 2016. Evrything is working fone after that except for 1 user. While connecting to SQL server, he is getting error like "target principal name is incorrect. cannot generate sspi context". Can someone help me on this?
Actually the user is connecting through windows authentication which means his credentials are stored in AD and he is able to connect other servers with this account. If his password would have been expired then he should not be able to connect to other servers.
Not necessarily, if you have previously established a connection to the server before the password expired, your session will remain open, but agreed yes if they try to spawn a new session it should fail.
As I said SSPI is something wrong with the authentication piece between client and server, and that the "usual" suspect is an expired password, I didn't say that was going to be the issue.
Check SPN's, check AD, check delegation, is something forcing kerberos vs ntlm failback, make sure the user isn't doing something strange in connecting to the server,
It is something environmental between the one user and the others, so check what someone is doing that works vs the person who is failing
Have checked with AD team and it seems the AD side permissions are fine and now i am bit confused of the SPN part. I am not able to figure out if the registered SPNs are fine or if anything is missing. I have even tried with Kerberos Configuration Manager utility but no luck. Getting below error:
The was an issue with accessing UserAccount information from the System, Please check logs at %AppData%\Microsoft\KerberosConfigMgr for more information.
Getting error and log is empty
Could be a number of issues, if everything is working for everyone else, you would need to see what is different for that user compared to the rest.
Generally this would be something as simple as the password has expired and needs to be changed.
Nothing really much to go on with the info provided
