SSPI handshake failed with error [.]

Version imprimable

20/04/2009, 16h05
dily0403

SSPI handshake failed with error [.]

Bonjour,

J'ai une erreur qui remonte régulièrement sur un de mes serveurs :

Citation:

Event Type: Error
Event Source: MSSQLSERVER
Event Category: (4)
Event ID: 17806
Date: 4/8/2009
Time: 10:02:01 PM
User: N/A
Computer: srv01

Description:
SSPI handshake failed with error code 0x80090324 while establishing a connection with integrated security; the connection has been closed. [CLIENT: 57.200.150.143]

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Parallèlement à :

Citation:

Event Type: Failure Audit
Event Source: MSSQLSERVER
Event Category: (4)
Event ID: 18452
Date: 4/8/2009
Time: 10:02:01 PM
User: N/A
Computer: srv01
Description:
Login failed for user ''. The user is not associated with a trusted SQL Server connection. [CLIENT: 57.200.150.143]

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp

Quelqu'un a-t-il une piste pour orienter mes recherches ?

Environnement :
Windows Server 2003 R2 Enterprise X64
SQL Server 2005 Enterprise Edition Build 9.00.3310.00 (X64)

Pour info, le serveur 57.200.150.143 est un serveur distant hébergeant un IIS...

Merci d'avance.
David.
20/04/2009, 18h46
SQLpro

Un probable time-out ?

A +
20/04/2009, 19h05
dily0403

Citation:

Envoyé par SQLpro

Un probable time-out ?

Ce qui m'interpelle, c'est :

Citation:

[...]while establishing a connection with integrated security

et :

Citation:

Login failed for user ''. The user is not associated with a trusted SQL Server connection
20/04/2009, 20h56
mikedavem

Bonsoir,

L'erreur avec le code 0x80090324 signifie la plupart du temps un problème décalage de temps lié à Kerberos. Vérifiez la date et l'heure sur vos serveurs pour voir si celles-ci correspondent. Le décalage ne doit pas être supérieur à 5min entre votre controleur de domaine et vos serveurs.

Vous pouvez également vérifier cela en cherchant des erreurs W32Time dans le journal d'événement

++
21/04/2009, 10h43
dily0403

Bien joué mikedavem, j'ai effectivement des erreurs parallèlement à mes erreurs SQL... Je connais des admin. systèmes qui vont se faire :sm:

Citation:

Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 7
Date: 4/8/2009
Time: 9:52:09 PM
User: N/A
Computer: srv01

Description:
The kerberos subsystem encountered a PAC verification failure. This indicates that the PAC from the client xxx in realm xxx had a PAC which failed to verify or was modified. Contact your system administrator.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Citation:

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 4/8/2009
Time: 9:52:09 PM
User: N/A
Computer: srv01

Description:
This computer was not able to set up a secure session with a domain controller in domain xxx due to the following:
The remote procedure call was cancelled.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.

ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Merci !!!