Tuesday, January 10, 2017

Kerberos Error

Of all the things, unexpected authentication errors from Kerberos are my least favorite. Mostly because, once I get the authentication set up, it's one of the things I expect to change the least.

I got the following error while trying to log in to the my lab:

Cannot connect to SQL Server.
The target principal name is incorrect. Cannot generate SSPI context.

Turns out, it was cached settings to blame, and running the following commands flushed the old settings and allowed a successful connection.

  • klist purge
  • ipconfig /flushdns

No comments:

Post a Comment