Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / Other Technologies / Clustering / June 2005

Tip: Looking for answers? Try searching our database.

Network Name and Kerberos Auth!

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Mark Harris - 27 Jun 2005 10:04 GMT
Dear all

Firstly, please note that this is PURELY a Clustering / Active Directory
question and nothing to do with SQL Server ... there just wasn't any other
clustering newsgroups around!!

Anyway, we have as Server2003 Cluster and i'm trying to setup a group that
has a Network Name Resource that has the "Kerberos Authentication" checkbox
ticked.
The point we're at now is that we've Pre-created the AD Computer Object (and
waited until it's fully replicated across the DC's), and out of pure
frustration, we've made the Cluster Service account a domain administrator
... however, when we try to bring the Network Name resource online it fails
and gives the following event-log message -

"The computer account for Cluster resource 'xxxxx Network Name' in domain
lala.poe.com could not be created for the following reason: Unable to create
computer account.

The text for the associated error code is: The account already exists.

The Cluster Service Account may lack the proper access rights to Active
Directory. The domain administrator should be contacted to assist with
resolving this issue."

As a domain admin, the cluster service account has more than enough rights
to "Hijack" the existing computer object (to which it also has a "FUll
Control" ACL), so we're a bit confused as to why it's trying to create a new
one!???

The site where the Clust er is based does have multiple DC's and we're
wondering if this is part of the issue ??
We've already tried everything is THIS article :

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/clus
tering/srclscbp.mspx


... and are now at something of a loss as to what to do to get it working
correctly!

HELP!!

Cheers

Mark
Mike Epprecht \(SQL MVP\) - 27 Jun 2005 12:42 GMT
Hi

There is one:

microsoft.public.windows.server.clustering

Signature

--------------------------------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland

IM: mike@epprecht.net

MVP Program: http://www.microsoft.com/mvp

Blog: http://www.msmvps.com/epprecht/

> Dear all
>
[quoted text clipped - 45 lines]
>
> Mark
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.