Windows error 0x80090322, -2146893022

Detailed Error Information

SEC_E_WRONG_PRINCIPAL[1]

MessageThe target principal name is incorrect.
Declared inwinerror.h

HRESULT analysis[2]

FlagsSeverityFailure
Reserved (R)false
OriginMicrosoft
NTSTATUSfalse
Reserved (X)false
FacilityCode9 (0x009)
NameFACILITY_SSPI[2][1]
DescriptionThe source of the error code is the Security API layer.[2][1]
Error Code802 (0x0322)

Questions

8votes
7answers

Add new server to Server Manager, get Kerberos error 0x80090322

I'm setting up a Windows lab environment. It has a Win2012R2 domain controller (srv001) and I'd like to add another Win2012R2 server to the domain (srv003). Actually, all goes well. I gave the new server a static IP address in the same subnet as the DC, pointed it to the [...] read more
active-directory
windows-server-2012
kerberos
windows
5votes
1answer

Enter-PSSession on localhost is failing

I am attempting to execute the following Powershell command: Enter-PSSession -ComputerName localhost The server in use is running Windows Server 2008 R2 SP1 64-bit. The server is on a domain. I am logged in under my domain administrator account. The powershell session was started as Administrator. I'm getting the following [...] read more
windows-server-2008-r2
powershell
winrm
remoting
2votes
1answer

Enter-PSSession : Connecting to remote server failed

I have three VMs: A, B and C. I use Enter-PSSession to connect them. But recently connecting B from A (A->B) never succeeds. Others ways (A->C, C->A, B->A, B->C, C->B) have no problem. The error message: Enter-PSSession : Connecting to remote server mymachine failed with the following error message : [...] read more
powershell
winrm
ps
2votes
2answers

Remote Powershell not working but test-wsman does

I need to script some routine task to execute remotly from a serverA to many hosts but a couple of them fail to execute the script. If i execute this: $cred = Get-Credential myUser Invoke-Command -ComputerName serverB -ScriptBlock{gci d:\} -Credential $cred or this: Test-WSMan -ComputerName ServerB -Credential $cred -Authentication Negotiate [...] read more
powershell
powershell-v3.0
remote-access
powershell-v4.0
1vote
2answers

How do I enable both PowerShell Remoting and SPN for SQL Server Reporting?

I have tried this question on Stack Exchange - Database Administrators (https://dba.stackexchange.com/q/129286/51925), but I don't get any responses, so I'll try here. I'm struggling with remoting servers with SQL Server Reporting Services. My Reporting Services are running with individual domain-accounts, and I have set up SPNs for them (HTTP/<Machine> <domain>\<user>). [...] read more
powershell
sql-server
ssrs
1vote
1answer

Error when connecting via Windows Remote Management

I have a simple PowerShell script that uses Invoke-Command to invoke a PowerShell ScriptBlock on a remote computer through Windows Remote Management (WinRM). The script is being executed from a Windows Server 2012 system, and targeting a Windows 8.1 system. The script is very simple, and looks something like this: [...] read more
windows
powershell
winrm
0votes
0answers

SPN and Remote Powershell with Kerberos - Hyper-V Vm's

I have a devbox that deploys updates to our appllication/iis server from a third party application with remote powershell scripts. The third party app generates this script to do this from the devbox to the appserver: SetSpn -f -s HTTP/appserver username SetSpn -f -s HTTP/appserver.mydomain.com username I would expect to [...] read more
powershell
hyper-v
spn
0votes
2answers

curl: (35) schannel: SNI or certificate check failed: SEC_E_WRONG_PRINCIPAL (0x80090322) - The target principal name is incorrect

I am trying to setup a https server for local development.I am using a Windows 10 machine . I have generated a self signed Certificate using openssl. I used the following commands. openssl genrsa -out key.pem openssl req -new -key key.pem -out csr.pem openssl x509 -req -days 9999 -in csr.pem [...] read more
openssl
ssl-certificate
x509
mmc
0votes
0answers

rvest returs schannel: SNI or certificate check failed: SEC_E_WRONG_PRINCIPAL (0x80090322) - The target principal name is incorrect

I would like to webscrape the following page to have a dataframe with the list of names and emails. However the following code return the following error after read_html Error in open.connection(x, "rb") : schannel: SNI or certificate check failed: SEC_E_WRONG_PRINCIPAL (0x80090322) - The target principal name is incorrect. r<-read_html("https://www.biologie.lmu.de/personen/index.html") [...] read more
r
web-scraping
rvest
0votes
0answers

Looking for tricks to fix New-PSSession errorcode 0x80090322

New-PSSession is pretty straight forward and for the most part works, but it's still a tad dodgy in the environment I am working within. The company I do side sysadmin for has a strange situation where we have two VPNs floating around with most of the employees working remote. Now [...] read more
powershell
powershell-remoting
0votes
1answer

TFS 'Powershell on Target Machines' task for machines in different AD domain

We want to utilize TFS release management for our deployments. We have several environments (dev, qa, staging, prod). Each of them in separate AD forest. Build machine also resides in separate forest. No trust between them. I set up target machines to accept CredSSP authentications for PS remoting. I was [...] read more
powershell
tfs
powershell-remoting
ms-release-management
0votes
1answer

Dysfunctional Clone

A Database Server has been cloned. The Operating System is "Microsoft Windows XP Professional Version 2002 Service Pack 3". The Query Environment is "Microsoft SQL Server 2008 Management Studio 10.0.4000.0". After cloning, the following behaviour has been noticed. While attempting to connect from outside the machine, yet within the same [...] read more
database
ssms
sspi
0votes
1answer

Domain group policy not updating over site-to-site VPN

I have 2 sites: 192.168.10.0/24 - main site, this is where DC is. 192.168.20.0/24 - remote site, connected via site-to-site VPN. On main site everything works fine, GPO are being updated to members. On remote site, I can login with domain user, I can ping DC server via IP address [...] read more
group-policy
domain
site-to-site-vpn
0votes
1answer

can't open new powershell session from one server to another

I am trying to open a powershell session from one server to another. I can open sessions to servert1/2 which have the same configuration as far as I can tell. trustedhosts are the same, same user/pw being used. Yet when trying to open a session to serverp01 I get the [...] read more
powershell
kerberos
powershell-v4.0
0votes
0answers

AD replication: The target principal name is incorrect. 2146893022

I have three domain controlers, and repadmin /showrepl command outputs the following: C:\Windows\system32>repadmin /showrepl Repadmin: running command /showrepl against full DC localhost Default-First-Site-Name\TSSVDC01 DSA Options: IS_GC DISABLE_OUTBOUND_REPL Site Options: (none) DSA object GUID: 3e556767-3e6a-434b-95df-f37620cb0ac4 DSA invocationID: 3e556767-3e6a-434b-95df-f37620cb0ac4 ==== INBOUND NEIGHBORS ====================================== DC=domain,DC=lan Default-First-Site-Name\TPSVDC03 via RPC DSA object GUID: b8fe2d78-8454-4f2e-bb2d-39d7722320bc Last [...] read more
active-directory
replication
-1votes
1answer

Let's Encrypt with HApRoxy on GKE

I am following some articles to implement SSL on my application. But not able to understand how to generate the certificate or do I need to generate the certificate or not? The main thing is, in concept, I am not able to put the things together. Let me explain the [...] read more
ssl
kubernetes
haproxy
lets-encrypt
-1votes
1answer

New-PSSession localhost failed: WinRM cannot process the request

I've got the problem that i want to start an New-PSSession on my server. If i enter the command in powershell i will get the following error: New-PSSession : [localhost] Connecting to remote server localhost failed with the following error message : WinRM cannot process the request. The following error [...] read more
powershell
authentication
localhost
winrm

Comments

Leave a comment

(plain text only)

Sources

  1. winerror.h from Windows SDK 10.0.14393.0
  2. https://msdn.microsoft.com/en-us/library/cc231198.aspx

User contributions licensed under CC BY-SA 3.0