Cach khc phuc thng bao li "Khng th tao ng canh SSPI"

D?ch tiu ? D?ch tiu ?
ID c?a bi: 811889 - Xem s?n ph?m m bi ny p d?ng vo.
Bung t?t c? | Thu g?n t?t c?

? Trang ny

TM T?T

Bai vit tng bc nay m ta cach khc phuc s c cho cac ngun in hinh nht cua thng bao li "Khng th tao ng canh SSPI". Ban co th nhn c thng bao li nay trong cac iu kin sau:
  • Ban ang kt ni vi SQL Server.
  • Ban ang s dung tinh nng Bao mt Tich hp.
  • Kerberos c s dung thc hin uy nhim bao mt.

Hiu thut ng Kerberos va Tn C ban cua Dich vu

Trinh iu khin SQL Server trn may khach s dung tinh nng bao mt tich hp s dung ma thng bao bao mt Windows cua tai khoan ngi dung kt ni thanh cng vi may tinh ang chay SQL Server. Ma thng bao bao mt Windows c uy nhim t may khach sang may tinh ang chay SQL Server. Trinh iu khin SQL Server thc hin qua trinh uy nhim nay khi ma thng bao bao mt cua ngi dung c uy nhim t mt may tinh sang may tinh khac bng cach s dung mt trong nhng cu hinh sau:
  • NTLM qua ng ng c t tn (khng s dung Giao din Security Support Provider [SSPI])
  • NTLM qua khe cm TCP/IP vi SSPI
  • Kerberos qua khe cm TCP/IP vi SSPI
Giao din Security Support Provider (SSPI) la mt nhom API trong Windows cho phep uy nhim va xac thc tng h qua bt ky lp truyn tai d liu chung nao, chng han nh khe cm TCP/IP. Do o, SSPI cho phep may tinh ang chay h iu hanh Windows uy nhim an toan ma thng bao bao mt cua ngi dung t mt may tinh sang may tinh khac qua bt ky lp truyn tai nao co th truyn cac byte d liu cha qua x ly.

Li "Khng th tao ng canh SSPI" xut hin khi SSPI s dung Kerberos uy nhim qua TCP/IP va Kerberos khng th hoan thanh cac thao tac cn thit uy nhim thanh cng ma thng bao bao mt cua ngi dung cho may tinh ich ang chay SQL Server.

Ly do Giao din Security Support Provider chon NTLM hoc Kerberos

Kerberos s dung ma nhn dang co tn "Tn C ban cua Dich vu" (SPN). Coi SPN la mt min hoc ma nhn dang duy nht cua nhom cua phin ban nao o trong tai nguyn may chu mang. Ban co th co mt SPN cho mt dich vu Web, mt dich vu SQL hoc mt dich vu SMTP. Ban cung co th co nhiu phin ban dich vu Web trn cung mt may tinh thc co SPN duy nht.

Mt SPN cho SQL Server bao gm cac phn t sau:
  • ServiceClass: Phn t nay xac inh hang dich vu chung. Phn t nay lun la MSSQLSvc danh cho SQL Server.
  • Host: Phn t nay la DNS tn min u iu kin cua may tinh ang chay SQL Server.
  • Port: Phn t nay la s cng ma dich vu ang kt ni.
Vi du: SPN thng thng cho may tinh ang chay SQL Server la:
MSSQLSvc/SQLSERVER1.northamerica.corp.mycompany.com:1433
inh dang cua SPN cho phin ban mc inh va inh dang cua SPN cho phin ban co tn khng khac nhau. S cng la phn t lin kt SPN vi mt phin ban cu th.

Khi Trinh iu khin SQL Server trn may khach s dung tinh nng bao mt tich hp kt ni vi SQL Server, ma trinh iu khin trn may khach c x ly DNS u iu kin cua may tinh ang chay SQL Server bng cach s dung API kt ni mang WinSock. thc hin thao tac nay, ma trinh iu khin goi cac API WinSock gethostbyname va gethostbyaddr. Ngay ca khi ia chi IP hoc tn may chu c truyn dang tn may tinh ang chay SQL Server, trinh iu khin SQL Server c x ly DNS u iu kin cua may tinh nu may tinh ang s dung tinh nng bao mt tich hp.

Khi trinh iu khin SQL Server trn may khach x ly DNS u iu kin cua may tinh ang chay SQL Server thi DNS tng ng c s dung tao SPN cho may tinh nay. Do o, moi s c lin quan n vic ia chi IP hay tn may chu c x ly thanh DNS u iu kin bi WinSock co th khin trinh iu khin SQL Server tao mt SPN khng hp l cho may tinh ang chay SQL Server.

Vi du: SPN khng hp l ma trinh iu khin SQL Server phia may khach co th tao dang DNS u iu kin c x ly la:
  • MSSQLSvc/SQLSERVER1:1433
  • MSSQLSvc/123.123.123.123:1433
  • MSSQLSvc/SQLSERVER1.antartica.corp.mycompany.com:1433
  • MSSQLSvc/SQLSERVER1.dns.northamerica.corp.mycompany.com:1433
Khi trinh iu khin SQL Server tao SPN khng hp l, qua trinh xac thc vn hoat ng vi giao din SSPI c tim kim SPN trong dich vu th muc Active Directory va khng tim thy SPN. Nu giao din SSPI khng tim thy SPN, qua trinh xac thc Kerberos khng c thc hin. Khi o, lp SSPI chuyn thanh ch xac thc NTLM va qua trinh ng nhp s dung xac thc NTLM va thng thanh cng. Nu trinh iu khin SQL Server tao SPN hp l nhng khng c gan cho vung cha thich hp, trinh iu khin nay c s dung SPN nhng khng th, dn n thng bao li "Khng th tao ng canh SSPI". Nu tai khoan khi ng SQL Server la tai khoan h thng cuc b thi vung cha thich hp la tn may tinh. i vi bt ky tai khoan khac nao, vung cha thich hp la tai khoan khi ng SQL Server. Vi qua trinh xac thc se c s dung SPN u tin ma no tim thy nn hay am bao rng khng co SPN nao c gan cho vung cha khng thich hp. Noi cach khac, mi SPN phai c gan cho mt va chi mt vung cha.

Yu t chinh giup cho qua trinh xac thc Kerberos thanh cng la chc nng DNS hp l trn mang. Ban co th kim tra chc nng nay trn may khach va may chu bng cach s dung tin ich dong lnh Ping. Trn may khach, hay chay lnh sau ly ia chi IP cua may chu ang chay SQL Server (ni ma tn may tinh ang chay SQL Server la SQLServer1):
ping sqlserver1
bit liu tin ich dong lnh Ping co x ly DNS u iu kin cua SQLServer1 hay khng, hay chay lnh sau:
ping -a IPAddress
Vi du:
C:\>ping SQLSERVER1

Ping SQLSERVER1 [123.123.123.123] vi 32 byte d liu:
	
Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128 Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128 Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128 Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128
	
Thng k ping cho 123.123.123.123: Goi tin: a gi = 4, a nhn = 4, a mt = 0 (0% mt), Thi gian cua qua trinh hi ap xp xi tinh bng mili giy: Ti thiu = 0ms, Ti a = 0ms, Trung binh = 0ms
C:\>ping -a 123.123.123.123
	
Ping SQLSERVER1.northamerica.corp.mycompany.com [123.123.123.123] vi 32 byte d liu:
	
Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128 Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128 Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128 Tra li t 123.123.123.123: bytes=32 time<10ms TTL=128 Thng k ping cho 123.123.123.123: Goi tin: a gi = 4, a nhn = 4, a mt = 0 (0% mt), Thi gian cua qua trinh hi ap xp xi tinh bng mili giy: Ti thiu = 0ms, Ti a = 0ms, Trung binh = 0ms

C:\>
Khi lnh ping -a IPAddress x ly thanh DNS ung, u iu kin cua may tinh ang chay SQL Server thi giai phap phia may chu cung thanh cng.

Tao Tn C ban cua Dich vu SQL Server

y la mt trong nhng phn quan trong trong tng tac Kerberos va SQL Server. Vi SQL Server, ban co th chay dich vu SQL Server mt trong nhng iu kin sau: tai khoan LocalSystem, tai khoan ngi dung cuc b hay tai khoan ngi dung trong min. Khi phin ban dich vu SQL Server khi ng, no c ng ky SPN ring cua minh trong Active Directory bng cach s dung lnh goi API DsWriteAccountSpn. Nu lnh goi khng thanh cng, canh bao sau c ghi trong Trinh xem S kin:

Ngun: MSSQLServer EventID: M ta 19011: Thng tin SuperSocket: (SpnRegister) : Li 8344.

bit thm thng tin v chc nng DsWriteAccountSpn, hay truy nhp Web site sau cua Microsoft:
http://msdn2.microsoft.com/en-us/library/ms676056.aspx

Simplified explanation

Nu ban chay dich vu SQL Server trong tai khoan LocalSystem thi SPN c t ng ng ky va Kerberos tng tac thanh cng vi may tinh ang chay SQL Server. Tuy nhin, nu ban chay dich vu SQL Server trong tai khoan min hoc trong tai khoan cuc b thi n lc tao SPN se khng thanh cng trong hu ht cac trng hp vi tai khoan min va tai khoan cuc b khng co quyn t SPN ring cua chung. Khi qua trinh tao SPN khng thanh cng, iu nay nghia la khng co SPN nao c thit lp cho may tinh ang chay SQL Server. Nu ban kim tra bng tai khoan quan tri vin trong min lam tai khoan dich vu SQL Server thi SPN c tao thanh cng vi uy nhim cp quan tri vin trong min ma ban phai co tao SPN ang co sn.

Vi ban co th khng s dung tai khoan quan tri vin trong min chay dich vu SQL Server ( ngn rui ro v bao mt) nn may tinh ang chay SQL Server khng th tao SPN ring cua no. Do o, ban phai tao thu cng SPN cho may tinh ang chay SQL Server nu ban mun s dung Kerberos khi ban kt ni vi may tinh ang chay SQL Server. iu nay ung nu ban ang chay SQL Server trong tai khoan ngi dung trong min hoc trong tai khoan ngi dung cuc b. SPN ma ban tao phai c gan cho tai khoan dich vu cua dich vu SQL Server trn may tinh cu th o. Khng th gan SPN cho vung cha may tinh tr khi may tinh ang chay SQL Server khi ng bng h thng cuc b. Phai co mt va duy nht mt SPN va SPN nay phai c gan cho vung cha thich hp. Thng thi y la tai khoan dich vu hin tai c?a SQL Server. Tuy nhin, y la tai khoan may tinh co h thng cuc b.

Kim tra min

Kim tra xem min ma ban ng nhp co th giao tip vi min co may tinh ang chay SQL Server hay khng. Cung phai co giai phap tn hp ly trong min.
  1. Ban phai am bao rng ban co th ng nhp thanh cng vao Windows bng cach s dung cung tai khoan min va mt khu lam tai khoan khi ng cua dich vu SQL Server. Vi du: li SSPI co th xay ra mt trong cac trng hp sau:
    • Tai khoan min bi khoa.
    • Mt khu cua tai khoan c thay i. Tuy nhin, ban khng bao gi khi ng lai dich vu SQL Server sau khi mt khu c thay i.
  2. Nu min ng nhp cua ban khac vi min cua may tinh ang chay SQL Server, hay kim tra mi quan h tin cy gia cac min.
  3. Kim tra xem min cha may chu va tai khoan min ma ban s dung kt ni co cung mt nhom hay khng. iu nay la bt buc SSPI hoat ng.
  4. S dung tuy chon Tai khoan c Tin cy Uy nhim trong Ngi dung va May tinh cua Active Directory khi ban khi ng SQL Server.

    Chu y Quyn 'Tai khoan c Tin cy Uy nhim' chi bt buc khi ban ang uy nhim uy quyn t may chu SQL ich sang may chu SQL t xa, chng han nh trong tinh hung xc th?c kep, gi?ng nh cac truy vn a phn phi (truy vn may chu c lin kt) s dung xac thc Windows.
  5. S dung tin ich Thao tac Tn C ban cua Dich vu cho Tai khoan (SetSPN.exe) trong B Tai nguyn Windows 2000. Tai khoan quan tri vin min Windows 2000 hoc tai khoan quan tri vin min Windows 2003 co th s dung tin ich nay kim soat SPN c gan cho dich vu va tai khoan. Trong trng hp SQL Server, phai co mt va duy nht mt SPN. Trong hu ht cac trng hp, SPN phai c gan cho vung cha thich hp, tai khoan dich vu SQL Server va tai khoan may tinh khi SQL Server khi ng bng tai khoan h thng cuc b. Nu ban khi ng SQL Server khi a ng nhp bng tai khoan LocalSystem thi SPN c t ng thit lp. Tuy nhin, nu ban s dung tai khoan min khi ng SQL Server hoc bt c khi nao ban thay i tai khoan c s dung khi ng SQL Server, ban phai chay SetSPN.exe g bo cac SPN ht han, sau o phai thm mt SPN hp l. bit thm thng tin, hay xem chu "Uy nhim Tai khoan Bao mt" trong Sach danh cho SQL Server Trc tuyn. lam vic nay, hay truy nhp Web site sau cua Microsoft:
    http://msdn2.microsoft.com/en-us/library/aa905162(SQL.80).aspx
    bit thm thng tin v B Tai nguyn Windows 2000, hay truy nhp Web site sau cua Microsoft:
    http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/default.mspx?mfr=true
  6. Kim tra xem giai phap tn co ang ung hay khng. Phng phap giai phap tn co th bao gm cac tp DNS, WINS, HOSTS va LMHOSTS. bit thm thng tin v s c giai phap tn va cach khc phuc s c, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    169790 Cach khc phuc s c c ban cua TCP/IP
  7. bit thm thng tin v cach khc phuc s c truy nhp va tng la vi Active Directory, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    291382 Cu hoi thng gp v Windows 2000 DNS va Windows Server 2003 DNS
    224196 Han ch lu lng sao chep trong Active Directory va lu lng RPC cua may khach ti m?t cng cu th

Cach t cu hinh dich vu SQL Server tao cac SPN ng cho phin ban SQL Server

t cu hinh dich vu SQL Server tao cac SPN ng, ban phai sa i thit t kim soat truy nhp cua tai khoan trong dich vu th muc Active Directory. Ban phai cp quyn "oc servicePrincipalName" va "Ghi servicePrincipalName" cho tai khoan dich vu SQL Server.

Canh bao Nu ban s dung phn inh vao Sa Giao din Dich vu Active Directory (ADSI), tin ich LDP hay bt ky may khach LDAP phin ban 3 nao khac va ban sa i khng ung cac thuc tinh cho i tng cua Active Directory thi ban co th gy ra s c nghim trong. Cac s c nay co th yu cu ban cai lai Microsoft Windows Server 2003, Microsoft Windows 2000 Server, Microsoft Exchange Server 2003, Microsoft Exchange 2000 Server hay ca Windows va Exchange. Chung ti khng th am bao co th giai quyt cac s c gy ra do vic sa i khng ung cac thuc tinh i tng cua Active Directory. Ban se t chiu rui ro khi sa i cac thuc tinh nay.

Chu y cp cac quyn thich hp va quyn cua ngi dung cho tai khoan khi ng SQL Server, ban phai c ng nhp vi t cach la quan tri vin min hoc phai yu cu quan tri vin min thc hin tac vu nay.

t cu hinh dich vu SQL Server tao cac SPN ng, hay lam theo cac bc sau:
  1. Bm Bt u, bm Chay, nhp Adsiedit.msc, ri bm OK.
  2. Trong phn inh vao Sa ADSI, m rng Min [DomainName], m rng DC= RootDomainName, m rng CN=Users, bm chut phai vao CN= AccountName, ri bm Thuc tinh.

    Chu y
    • DomainName la trinh gi ch cho tn min.
    • RootDomainName la trinh gi ch cho tn min gc.
    • AccountName la trinh gi ch cho tai khoan ma ban chi inh khi ng dich vu SQL Server.
    • Nu ban chi inh tai khoan H thng Cuc b khi ng dich vu SQL Server, AccountName la trinh gi ch cho tai khoan ma ban s dung ng nhp vao Microsoft Windows.
    • Nu ban chi inh tai khoan ngi dung trong min khi ng dich vu SQL Server, AccountName la trinh gi ch cho tai khoan ngi dung trong min.
  3. Trong hp thoai CN= AccountName Thuc tinh, bm vao tab Bao mt.
  4. Trn tab Bao mt, bm Nng cao.
  5. Trong hp thoai Thit t Bao mt Nng cao, am bao rng SELF c lit k trong muc Cac muc quyn.

    Nu SELF khng c lit k, bm Thm, ri thm SELF.
  6. Trong Cac muc quyn, bm SELF, ri bm Sa.
  7. Trong hp thoai Muc Quyn, bm vao tab Thuc tinh.
  8. Trn tab Thuc tinh, bm vao Chi i tng nay trong danh sach Ap dung vao, sau o am bao rng chon cac hp kim cho cac quyn sau trong muc Quyn:
    • oc servicePrincipalName
    • Ghi servicePrincipalName
  9. Bm OK ba ln, sau o thoat khoi phn inh vao Sa ADSI.
c tr giup quy trinh nay, hay lin h vi b phn h tr san phm Active Directory va cp n bai vit nay trong C s? Ki?n th?c Microsoft.

Kim tra mi trng may chu

Kim tra mt s thit t c ban trn may tinh cai t SQL Server:
  1. Kerberos khng c h tr trn may tinh chay Windows 2000 ang chay chc nng Tao cum cho Windows tr khi ban a ap dung Goi Dich vu 3 (hoc phin ban mi hn) cho Windows 2000. Do o, moi n lc s dung xac thc SSPI trn phin ban SQL Server c tao cum co th khng thanh cng. bit thm thng tin, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    235529 H tr Kerberos trn cac cum may chu chay Windows 2000
  2. Kim tra xem may chu co ang chay Windows 2000 Goi Dich vu 1 (SP1) hay khng. bit thm thng tin v h tr Kerberos trn may chu chay Windows 2000, bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    267588 Thng bao li "Khng th tao ng canh SSPI" hin thi khi ban kt ni vi SQL Server 2000
  3. Trong mt cum, nu tai khoan ma ban s dung khi ng SQL Server, SQL Server Agent hay cac thay i dich vu tim kim toan vn ban, chng han nh mt khu mi, hay lam theo cac bc c cung cp bai vit sau trong C s Kin thc Microsoft:
    239885 Cach thay i tai khoan dich vu cho may tinh c tao cum ang chay SQL Server
  4. Kim tra xem tai khoan ma ban s dung khi ng SQL Server co cac quyn thich hp hay khng. Nu ban ang s dung tai khoan khng phai la thanh vin cua nhom Quan tri vin Cuc b, hay xem chu "Thit lp Tai khoan Dich vu Windows" trong Sach danh cho SQL Trc tuyn bit danh sach quyn chi tit ma tai khoan nay phai co:
    http://msdn2.microsoft.com/en-us/library/aa176564(SQL.80).aspx

Kim tra mi trng may khach

Kim tra cac muc sau cua may khach:
  1. am bao rng NTLM Security Support Provider c cai t ung va c kich hoat trn may khach. bit thm thng tin, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    269541 Thng bao li khi ban kt ni vi SQL Server nu thiu khoa ng ky Windows NT LM Security Support Provider: "khng th tao ng canh SSPI"
  2. Xac inh xem ban co ang s dung uy nhim c lu trong b nh cache hay khng. Nu ban c ng nhp vao may khach bng uy nhim c lu trong b nh cache, hay ng xut khoi may tinh ri ng nhp lai khi kt ni vi b iu khin min ngn s dung uy nhim c lu trong b nh cache. bit thm thng tin v cach xac inh xem ban co ang s dung uy nhim c lu trong b nh cache hay khng, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    242536 Ngi dung khng c canh bao khi ng nhp bng uy nhim cua min c lu trong b nh cache
  3. Kim tra xem ngay trn may khach va may chu co hp l khng. Nu ngay cach qua xa, uy nhim cua ban co th c xem la khng hp l.
  4. SSPI s dung mt tp co tn la Security.dll. Nu bt ky ng dung nao khac cai t tp co tn nay thi tp o co th s dung tp SSPI thc thay vao o. bit thm thng tin, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    253577 Li: 80004005 - MS ODBC Trinh iu khin SQL Server khng th khi ng goi SSPI
  5. Nu h iu hanh trn may khach la Microsoft Windows 98, ban phai cai t May khach cho cu phn Mang Microsoft trn may khach. bit thm thng tin, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
    267550 LI: "Xac nhn khng thanh cng" khi ban kt ni vi SQL Server qua TCP/IP

Kim tra tin ich mang may khach

Tin ich Mang May khach (CNU) c cung cp cung vi Cu phn Truy nhp D liu Microsoft (MDAC) va c s dung t cu hinh kt ni vi may tinh ang chay SQL Server. Ban co th s dung tin ich MDAC Cliconfg.exe CNU t cu hinh kt ni:
  1. Trn tab Chung, cac giao thc ng dn c xac inh thay i theo phin ban MDAC. Vi cac phin ban MDAC trc, ban co th chon giao thc "mc inh". Trn cac phin ban MDAC mi nht, ban co th kich hoat mt hoc nhiu giao thc bng phin ban MDAC u danh sach khi ban kt ni vi SQL Server. Vi SSPI chi ap dung cho TCP/IP nn ban co th s dung mt giao thc khac nh ng ng c t tn tranh bi li.
  2. Kim tra tab Bi danh trong CNU xac minh xem bi danh co c xac inh cho may chu ma ban ang c kt ni khng. Nu bi danh may chu a c xac inh, hay kim tra thit t i vi cach t cu hinh may tinh nay kt ni vi SQL Server. Ban co th xac minh iu nay bng cach xoa bi danh may chu xem hoat ng co thay i hay khng.
  3. Nu bi danh may chu khng c xac inh trn CNU, hay thm bi danh cho may chu ma ban ang kt ni. Khi thc hin tac vu nay, ban cung xac inh ro giao thc va xac inh ia chi IP va cng theo cach tuy chon.

Thng tin thu thp m trng hp H tr San phm cua Microsoft (PSS)

Nu ban khng th bit nguyn nhn cua s c bng cach s dung cac bc khc phuc s c trong bai vit nay, hay thu thp thng tin sau va m trng hp H tr San phm cua Microsoft (PSS):

bit danh sach y u s in thoai Dich vu H tr San phm cua Microsoft va thng tin v chi phi h tr, hay truy nhp Web site sau cua Microsoft:
http://support.microsoft.com/contactus/?ln=vi-vn&ws=support
  1. Tao mt bao cao sqldiag t SQL Server. bit thm thng tin, hay xem chu "Tin ich sqldiag" trong Sach danh cho SQL Server Trc tuyn.
  2. Chup anh chup man hinh li trn may khach.
  3. Trn nut khng th kt ni vi SQL Server, nhp lnh sau t du nhc lnh:
    net start > started.txt
    Lnh nay tao mt tp co tn Started.txt trong th muc ma ban mun chay lnh.
  4. Lu cac gia tri cho khoa ng ky trong khoa ng ky sau trn may khach cua ban:
    HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\MSSQLSERVER\CLIENT\CONNECTTO
  5. Trong mi trng cum, ly gia tri cua khoa ng ky sau cho tng nut cua cum:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\LMCompatibilityLevel
  6. Trong mi trng cum, xem khoa ng ky sau co tn tai trn tng nut may chu cum khng:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTLMSsp
  7. Chup lai kt qua nu ban kt ni vi SQL Server bng cach s dung tn Quy c t tn Ph bin (UNC) (hoc Tn Mang SQL trn mt cum) t may khach.
  8. Chup lai kt qua nu ban ping tn may tinh (hoc Tn Mang SQL trn mt cum) t may khach.
  9. Lu tn cua tai khoan ngi dung ma ban s dung khi ng tng dich vu SQL Server (MSSQLServer, SQLServerAgent, MSSearch).
  10. Chuyn gia h tr phai bit liu SQL Server co c t cu hinh cho Xac thc Hn hp hay Chi Xac thc Windows.
  11. Xem ban co th kt ni vi may tinh ang chay SQL Server khng t cung mt may khach bng cach s dung Xac thc SQL Server.
  12. Xem ban co th kt ni bng cach s dung giao thc ng ng c t tn khng.

Cach thit lp thu cng Tn C ban cua Dich vu cho SQL Server

bit thm thng tin v cach thit lp thu cng Tn C ban cua Dich vu cho SQL Server, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
319723 Cach s dung xac thc Kerberos trong SQL Server
Security Support Provider Interface (SSPI) la giao din cho bao mt Microsoft Windows NT c s dung xac thc Kerberos va h tr lc xac thc cua NTLM Security Support Provider. Qua trinh xac thc din ra cp h iu hanh khi ban ng nhp vao min Windows. Xac thc Kerberos chi kha dung trn may tinh chay Windows 2000 c kich hoat Kerberos va ang s dung Active Directory.

SSPI chi c s dung cho kt ni c tao bng cach s dung chc nng Xac thc Windows. (Xac thc Windows cung c bit n la Kt ni Tin cy hay Bao mt Tich hp). SSPI khng c s dung bi giao thc ng ng c t tn hoc cac kt ni a giao thc. Do o, ban co th tranh s c bng cach t cu hinh may khach cua minh kt ni t giao thc khng phai TCP/IP.

Khi may khach SQL Server c s dung tinh nng bao mt tich hp qua khe cm TCP/IP ti may tinh t xa ang chay SQL Server, th vin mang may khach SQL Server s dung API SSPI thc hin uy nhim bao mt. May khach mang SQL Server (Dbnetlib.dll) thc hin cuc goi ti chc nng AcquireCredentialsHandle va chuyn thnh "thng lng" cho tham s pszPackage. Thao tac nay thng bao cho nha cung cp bao mt c ban thc hin uy nhim thng lng. Trong ng canh nay, thng lng co nghia la c xac thc Kerberos hoc NTLM trn may tinh chay Windows. Noi cach khac, Windows s dung uy nhim Kerberos nu may tinh ich ang chay SQL Server co SPN kt hp c t cu hinh ung. Nu khng, Windows s dung uy nhim NTLM.

Chu y Kim tra xem ban co ang s dung tai khoan co tn "SYSTEM" khi ng bt ky dich vu SQL Server nao hay khng (MSSQLServer, SQLServerAgent, MSSearch). T khoa SYSTEM co th gy xung t vi Trung tm Phn phi Khoa (KDC).

THAM KH?O

bit thm thng tin v cach hoat ng cua tinh nng bao mt Kerberos va SSPI, hay bm vao cac s bai vit sau y xem bai vit trong C s Kin thc Microsoft:
266080 Cu tra li cho cu hoi thng gp v Kerberos
231789 Quy trinh ng nhp cuc b cho Windows 2000
304161 Xac thc tng h SSPI c chi ra phia may khach ch khng phai phia may chu
232179 Quan tri Kerberos trong Windows 2000
230476 M ta cac li ph bin lin quan n Kerberos trong Windows 2000
262177 Cach kich hoat ghi s kin Kerberos
277658 Setspn khng thanh cng nu tn min khac vi tn NetBIOS ma SPN SQL Server c ng ky
244474 Cach buc Kerberos s dung TCP thay vi UDP trong Windows Server 2003, Windows XP va Windows 2000
326985 Cach khc phuc s c lin quan n Kerberos trong IIS
xem bao cao v tinh nng bao mt Microsoft SQL Server 2000, hay truy nhp Web site sau cua Microsoft:
http://technet.microsoft.com/en-us/cc984178.aspx

Thu?c tnh

ID c?a bi: 811889 - L?n xem xt sau cng: 17 Thang Chin 2011 - Xem xt l?i: 2.0
p d?ng
  • Microsoft SQL Server 2005 Standard Edition
  • Microsoft SQL Server 2005 Developer Edition
  • Microsoft SQL Server 2005 Enterprise Edition
  • Microsoft SQL Server 2005 Workgroup Edition
  • Microsoft SQL Server 2005 Express Edition
  • Microsoft SQL Server 2000 Standard Edition
  • Microsoft SQL Server 2000 64-bit Edition
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
T? kha:
kbsqlsetup kbhowtomaster kbhowto KB811889

Cung cp Phan hi

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com