我正在从我的 iis 到我的 sql 服务器进行双跳 kerberos 身份验证,为此我需要 SQLEXPRESS 服务在域用户下运行。
域名:domain.test 服务用户:sqlSrv sql server 计算机名:SQL
当我尝试启动服务时,这是我得到的错误:
Windows Could not start the SQL Server (SQLEXPRESS) on Local Computer.
For more information, review the System Event Log.
If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 17058.
我在事件日志中看到的错误是:
initerrlog: Could not open error log file 'c:\Program Files\Microsoft SQL Server\MSSQ.1\MSSQL\LOG\ERRORLOG'.
Operating System error = 5 (Access is denied).
Source: MSSQL$SQLEXPRESS
Event ID: 17058
我设置了以下 SPN:
setspn -L domain.test\sqlSrv
setspn -A SQLEXPRESS/SQL:1433 domain.test\sqlSrv
setspn -A SQLEXPRESS/SQL.domain.test:1433 domain.test\sqlSrv