{"id":1348,"date":"2014-02-18T10:01:21","date_gmt":"2014-02-18T16:01:21","guid":{"rendered":"https:\/\/www.ryanjadams.com\/?p=1348"},"modified":"2014-02-18T10:01:21","modified_gmt":"2014-02-18T16:01:21","slug":"sspi-handshake-failed","status":"publish","type":"post","link":"https:\/\/www.ryanjadams.com\/2014\/02\/sspi-handshake-failed\/","title":{"rendered":"SSPI Handshake Failed"},"content":{"rendered":"<p>A fellow community member sent me an email saying he was having trouble authenticating with Kerberos. \u00a0Here is the error he was receiving:<\/p>\n<p><em>SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure.\u00a0 [CLIENT: &lt;named pipe&gt;].<\/em><\/p>\n<p>You&#8217;ll notice that he was using Named Pipes and a lot of folks might think that is the reason for the error and that SQL Server doesn&#8217;t support Kerberos over Named Pipes. \u00a0However, that&#8217;s not the case as it is version dependent. \u00a0Kerberos over Named Pipes started being supported in SQL Server 2008 and this person was running SQL Server 2008 R2. \u00a0In this instance, that was not the issue.<\/p>\n<p>I walked him through some troubleshooting scenarios to narrow down the cause. \u00a0I had him verify his SPNs to make sure they were correct, were located on the correct object in Active Directory, and he had SPNs for both the FQDN and NetBIOS names. \u00a0That all checked out so I had him verify that port 88 (Kerberos) was open between the client and server. \u00a0That also checked out fine. \u00a0I asked him this one last thing:<\/p>\n<blockquote><p>Also, make sure you are using Windows authentication since Kerberos does not work with SQL authentication.\u00a0 If you are using Windows authentication then make sure the client and server are in the same domain or a trusted domain.<\/p><\/blockquote>\n<p>That last sentence was the ticket. \u00a0He replied that his client and server were in different domains that were NOT trusted. \u00a0Unfortunately for him, there is nothing he can do short of moving the servers into the same domain or setting up a trust between them. \u00a0That&#8217;s a core concept for how Kerberos works. \u00a0<strong>Clients and servers MUST be in the same domain or a trusted domain.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A fellow community member sent me an email saying he was having trouble authenticating with Kerberos. \u00a0Here is the error he was receiving: SSPI handshake [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[2,128,10,18,19],"tags":[165,50,198],"class_list":["post-1348","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-kerberos","category-sql-server","category-sqlservercentral","category-sqlserverpedia-syndication","tag-active-directory","tag-ad","tag-kerberos"],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SSPI Handshake Failed<\/title>\n<meta name=\"description\" content=\"Fix for &quot;SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. [CLIENT: ].&quot;\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSPI Handshake Failed\" \/>\n<meta property=\"og:description\" content=\"Fix for &quot;SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. [CLIENT: ].&quot;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/\" \/>\n<meta property=\"og:site_name\" content=\"Ryan Adams Blog\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/profile.php?id=1190612067\" \/>\n<meta property=\"article:author\" content=\"http:\/\/www.facebook.com\/profile.php?id=1190612067\" \/>\n<meta property=\"article:published_time\" content=\"2014-02-18T16:01:21+00:00\" \/>\n<meta name=\"author\" content=\"Ryan Adams\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ryanjadams\" \/>\n<meta name=\"twitter:site\" content=\"@ryanjadams\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ryan Adams\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/\"},\"author\":{\"name\":\"Ryan Adams\",\"@id\":\"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8\"},\"headline\":\"SSPI Handshake Failed\",\"datePublished\":\"2014-02-18T16:01:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/\"},\"wordCount\":312,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8\"},\"keywords\":[\"Active Directory\",\"AD\",\"Kerberos\"],\"articleSection\":[\"Active Directory\",\"Kerberos\",\"SQL Server\",\"SQLServerCentral Syndication\",\"SQLServerPedia Syndication\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/\",\"url\":\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/\",\"name\":\"SSPI Handshake Failed\",\"isPartOf\":{\"@id\":\"https:\/\/www.ryanjadams.com\/#website\"},\"datePublished\":\"2014-02-18T16:01:21+00:00\",\"description\":\"Fix for \\\"SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. [CLIENT: ].\\\"\",\"breadcrumb\":{\"@id\":\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.ryanjadams.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSPI Handshake Failed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ryanjadams.com\/#website\",\"url\":\"https:\/\/www.ryanjadams.com\/\",\"name\":\"Ryan Adams Blog\",\"description\":\"Microsoft Data Platform\",\"publisher\":{\"@id\":\"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ryanjadams.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8\",\"name\":\"Ryan Adams\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ryanjadams.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/i0.wp.com\/www.ryanjadams.com\/wp-content\/uploads\/2019\/07\/RyanAdams1.jpg?fit=3422%2C5133&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/www.ryanjadams.com\/wp-content\/uploads\/2019\/07\/RyanAdams1.jpg?fit=3422%2C5133&ssl=1\",\"width\":3422,\"height\":5133,\"caption\":\"Ryan Adams\"},\"logo\":{\"@id\":\"https:\/\/www.ryanjadams.com\/#\/schema\/person\/image\/\"},\"description\":\"Ryan Adams is a Senior Premier Field Engineer for Microsoft. He works directly with customers to help them realize their business potential and accelerate their digital transformation on premises and in the cloud. Previously, Ryan was a Microsoft Data Platform MVP and spent 19 years working for a fortune 100 company. His passion is the SQL Server Engine, High Availability, and Disaster Recovery. He also served on the Board of Directors for the North Texas SQL Server User Group, was President of the PASS Performance Virtual Chapter, was a PASS Regional Mentor, and served as a Director for the PASS organization.\",\"sameAs\":[\"https:\/\/www.ryanjadams.com\",\"http:\/\/www.facebook.com\/profile.php?id=1190612067\",\"http:\/\/www.linkedin.com\/in\/ryanjadams\",\"https:\/\/x.com\/ryanjadams\",\"https:\/\/www.youtube.com\/channel\/UCWWur1vi5nXN0-zy8Adyslg?view_as=subscriber\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SSPI Handshake Failed","description":"Fix for \"SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. [CLIENT: ].\"","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/","og_locale":"en_US","og_type":"article","og_title":"SSPI Handshake Failed","og_description":"Fix for \"SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. [CLIENT: ].\"","og_url":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/","og_site_name":"Ryan Adams Blog","article_publisher":"http:\/\/www.facebook.com\/profile.php?id=1190612067","article_author":"http:\/\/www.facebook.com\/profile.php?id=1190612067","article_published_time":"2014-02-18T16:01:21+00:00","author":"Ryan Adams","twitter_card":"summary_large_image","twitter_creator":"@ryanjadams","twitter_site":"@ryanjadams","twitter_misc":{"Written by":"Ryan Adams","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#article","isPartOf":{"@id":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/"},"author":{"name":"Ryan Adams","@id":"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8"},"headline":"SSPI Handshake Failed","datePublished":"2014-02-18T16:01:21+00:00","mainEntityOfPage":{"@id":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/"},"wordCount":312,"commentCount":2,"publisher":{"@id":"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8"},"keywords":["Active Directory","AD","Kerberos"],"articleSection":["Active Directory","Kerberos","SQL Server","SQLServerCentral Syndication","SQLServerPedia Syndication"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/","url":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/","name":"SSPI Handshake Failed","isPartOf":{"@id":"https:\/\/www.ryanjadams.com\/#website"},"datePublished":"2014-02-18T16:01:21+00:00","description":"Fix for \"SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. [CLIENT: ].\"","breadcrumb":{"@id":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ryanjadams.com\/2014\/02\/sspi-handshake-failed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ryanjadams.com\/"},{"@type":"ListItem","position":2,"name":"SSPI Handshake Failed"}]},{"@type":"WebSite","@id":"https:\/\/www.ryanjadams.com\/#website","url":"https:\/\/www.ryanjadams.com\/","name":"Ryan Adams Blog","description":"Microsoft Data Platform","publisher":{"@id":"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ryanjadams.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.ryanjadams.com\/#\/schema\/person\/374bd7db8c31b8c84c826544c0ef8de8","name":"Ryan Adams","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ryanjadams.com\/#\/schema\/person\/image\/","url":"https:\/\/i0.wp.com\/www.ryanjadams.com\/wp-content\/uploads\/2019\/07\/RyanAdams1.jpg?fit=3422%2C5133&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.ryanjadams.com\/wp-content\/uploads\/2019\/07\/RyanAdams1.jpg?fit=3422%2C5133&ssl=1","width":3422,"height":5133,"caption":"Ryan Adams"},"logo":{"@id":"https:\/\/www.ryanjadams.com\/#\/schema\/person\/image\/"},"description":"Ryan Adams is a Senior Premier Field Engineer for Microsoft. He works directly with customers to help them realize their business potential and accelerate their digital transformation on premises and in the cloud. Previously, Ryan was a Microsoft Data Platform MVP and spent 19 years working for a fortune 100 company. His passion is the SQL Server Engine, High Availability, and Disaster Recovery. He also served on the Board of Directors for the North Texas SQL Server User Group, was President of the PASS Performance Virtual Chapter, was a PASS Regional Mentor, and served as a Director for the PASS organization.","sameAs":["https:\/\/www.ryanjadams.com","http:\/\/www.facebook.com\/profile.php?id=1190612067","http:\/\/www.linkedin.com\/in\/ryanjadams","https:\/\/x.com\/ryanjadams","https:\/\/www.youtube.com\/channel\/UCWWur1vi5nXN0-zy8Adyslg?view_as=subscriber"]}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/posts\/1348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/comments?post=1348"}],"version-history":[{"count":6,"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/posts\/1348\/revisions"}],"predecessor-version":[{"id":1396,"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/posts\/1348\/revisions\/1396"}],"wp:attachment":[{"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/media?parent=1348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/categories?post=1348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ryanjadams.com\/wp-json\/wp\/v2\/tags?post=1348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}