Intermittent warnings in Event Viewer: SpnRegister

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

SQL Server 2000 Forums

SQL Server Administration (2000)

Intermittent warnings in Event Viewer: SpnRegister

Author

Topic

Wanderer
Master Smack Fu Yak Hacker

1168 Posts

Posted - 2005-02-03 : 05:15:51

Hi all,

Our production DBA noted that we are getting the following intermittent warning's in the application event log:


Event Type:      Warning
Event Source:   MSSQL$xxxxxxxx
Event Category:            (8)
Event ID:          19011
Date:                03/02/2005
Time:                05:56:52
User:                N/A
Computer:         xxxxxxxx

Description:
SuperSocket info: (SpnRegister) : Error 8344.

We aren't seeing any ntoiceable error's at these event's. Searching the web, I found the following:

quote:

This just means that the service account you are running SQL under does not have permissions to register an SPN in Active Directory. It is nothing to be concerned about. If you require an SPN for linked server account delegation then you can add one manually using setspn or ADSIEdit.
--
HTH
Jasper Smith (SQL Server MVP)

What I've found in BOL sees to related to querying AD from SQL:

"OLE DB Provider for Microsoft Directory Services"

"For Kerberos authentication, delegation, and mutual authentication to work, the MSSQLServerOLAPService service must run under one of the following types of accounts: "

"To use delegation, all servers that you are connecting to must be running Microsoft® Windows® 2000, with Kerberos support enabled, and you must be using Microsoft Active Directory™, the directory service for Windows 2000. The following options in Active Directory must be specified as follows in order for delegation to work: "

Now, at a guess, this relates to that last hit, since we are running in a cluster, while we are not running analysis services (that I know of ... but hey, I'm the dev dba

), and are not querying the AD services (again, that I know of).

So - is this something to be concered about, should I tell them to regsiter the SPN for sql, using the setspn utility?

Ta

*##* *##* *##* *##*

Chaos, Disorder and Panic ... my work is done here!

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources