External trust and SSPi error


  • Hi All,

    we have an external trust between domain A and B.  Users from Domain B are trying to access via SQL Studio manager an SQL 2005 server in domain A and receive the dreaded sspi error cannot generate context I have reviewed the standard doc that most people are referred to when trying to diagnose the error but no joy.  

    What complicates this even more is the same user from an old workstation can authenticate and access the server yet from another machine the user cannot access the server.  I have checked group policies etc all is identical.

    When I run a network trace I can see that the workstation that fails to connect the user does not attempt to fail back to NTLM as it should (this being an external trust) but the workstation that does connect the user negotiates the authentication via DCERPC.

    Why would the workstation not fail back to NTLM?

    Any help much appreciated.


    Tuesday, January 15, 2013 11:14 AM


All replies