SSPI handshake failed with error code 0x80090311, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. No authority could be contacted for authentication. Login failed. The login is …

Recently, I wrote about Joining Ubuntu to an Active Directory Domain. That was for an actual Ubuntu box and the plan was that the next post would be about adding Apache to the mix. But then I got distracted by Apache on Bash on Ubuntu on Windows (check out my gists for sneak peaks). I should be practicing for my …

Back in 2009, I did a whole lot of messing around with Linux and Active Directory integration, primarily for Apache. Now that Linux is coming to Windows, I figured I'd brush up on my Linux and Windows Integrated Authentication skills to work with Ubuntu, too. Clients and Servers Since 2009, it seems that a couple …

Back in 2013, I wrote about "Using Windows Authentication to Connect to SQL Server from Linux". Considering how convoluted using Linux can get, doing so was surprisingly straightforward then and it's even easier now. Want to see a webcast about this topic? Aaron Nelson and I recorded a session for the SQL …

You know what's scary as hell? When one node of an important cluster loses its trust relationship with the domain and you see the error "the trust relationship between this workstation and the primary domain failed". That happened to me late last year with one of my SQL Server 2008 R2 nodes. The scary part …

As DBAs, one of the most common tasks performed is the installation of new SQL Servers. While I've installed hundreds of SQL Server instances over the years, I only recently come across the error described below. In the past, I've seen the SSPI context error, but it is usually tied to an issue with a domain controller, …

One of the things I love most about SuSE is how well it integrates with Active Directory. Joining a domain is easy when using yast. First I ensured that the Linux server's DNS server is pointed to my DC, then yast -> Network Services -> Windows Domain Membership. yast-wdm Note that if "Windows Domain …

Each time I start a new contract, the first thing I do is search for all SQL Servers across any network/subnet to which I have access. While the documentation I get is usually paltry or non-existent. When it does exist, it's usually only for the production SQL Servers. Sometimes, most production SQL Servers aren't even …

While I usually like conversation-style technical books (think: Manning's In Action series and many Wrox books), Microsoft's Patterns and Practices series is one of my favorite even though they feel so formal. Recently, my buddy Buck Woody posted a link to the freely available Patterns and Practices book for A Guide to …

According to the SharePoint 2010 Communities FAQ, Microsoft is burdening SharePoint 2010 Administrators with new requirements to obtain Active Directory accounts with "Replicate Directory Changes" permissions because... In order to interrogate AD about “what has changed since time xyz”, we need the …