How do you use cloud databases? Take the survey.
Options
Monitor fails to Login
ColinA
Posts: 1 New member
On one of the servers that we monitor we get login failures every day at the same time for around 5 mins and the monitoring stops. The monitor service is a windows account. Other monitored servers have no issues. The messages we receive are:
Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.
Error: 17806, Severity: 20, State: 14.
SSPI handshake failed with error code 0x80090311, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. No authority could be contacted for authentication.
Error: 18452, Severity: 14, State: 1
After the 5 mins everything starts working again. Any ideas what is happening?
Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.
Error: 17806, Severity: 20, State: 14.
SSPI handshake failed with error code 0x80090311, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. No authority could be contacted for authentication.
Error: 18452, Severity: 14, State: 1
After the 5 mins everything starts working again. Any ideas what is happening?
Tagged:
Answers
It can be related to SQL trying to contact AD for a kerberos ticket and failing, for which case I'd investigate your DC and see if you're getting any errors there. Also, on that server, run nltest /SC_QUERY:your-domain.com and see if you get any errors, or a successful return (eg Trusted DC Name/Connection).
Its potential cause could be a DNS issue, can you connect to SQL via windows authentication on this machine? If not look into refreshing the DNS settings.
It looks like you've not sent through the full error, are you also seeing Cannot generate SSPI context? This might help if so.