Can an AD service account host SPNs for multiple SQL Instances?
0
votes
1
answer
2999
views
Trying to set up Kerberos Authentication between two linked server to get past the double-hop issue.
Server A is in a domain with several other SQL Servers. All SQL instances on all servers in this domain are using the same service (user) account for running the instance.
Server B is in another domain using a separate domain account to run its instance. It is currently the only SQL server running with a domain account. Other are using local accounts.
I am configuring Server B's service account to allow for self managing SPN's which *should* be easy. My problem is I will need to do this with Server A's service account as well.
I can't find what I would like to make this clear to me but I am concerned about how Server A's service account will work once I allow it to "self manage" its SPNs i.e. give the AD account read/write ServicePrincipalNames of itself.
Can an AD service account host SPNs for multiple SQL Instances? Currently the account is not hosting any when I query it via
setspn -L [domainname]\sqlengine
All SQL servers are running 2008 or higher. Most are 2016.
Asked by Matt
(365 rep)
Feb 10, 2021, 08:38 PM
Last activity: Feb 11, 2021, 07:55 AM
Last activity: Feb 11, 2021, 07:55 AM