Fehler TFS report seite account SPN
Also folgendes:
Server 2008 mit Mssql 2008 und Teamfoundation 2010. wenn ich den Konfigurationsmanager für Report Service aufrufe und mir die web URLs angucken möchte, werde ich nach meinen Accdaten gefragt. Nun wird weder der Admin Acc akzeptiert noch der TFReport und im Eventlog steht:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server TFReport. The target name used was HTTP/####.###.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (#####.LOCAL) is different from the client domain (#####.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Ich gebe zu mir sagt das nicht viel. Offenbar habe ich irgendwo 2 Accounts mit den selben Eigenschaften? Wie kriege ich da was raus?
Server 2008 mit Mssql 2008 und Teamfoundation 2010. wenn ich den Konfigurationsmanager für Report Service aufrufe und mir die web URLs angucken möchte, werde ich nach meinen Accdaten gefragt. Nun wird weder der Admin Acc akzeptiert noch der TFReport und im Eventlog steht:
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server TFReport. The target name used was HTTP/####.###.local. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (#####.LOCAL) is different from the client domain (#####.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Ich gebe zu mir sagt das nicht viel. Offenbar habe ich irgendwo 2 Accounts mit den selben Eigenschaften? Wie kriege ich da was raus?
Bitte markiere auch die Kommentare, die zur Lösung des Beitrags beigetragen haben
Content-ID: 147432
Url: https://administrator.de/contentid/147432
Ausgedruckt am: 26.11.2024 um 18:11 Uhr