问题描述
我在 Active Directory 域控制器下添加了 Ubuntu 20.04，在创建新用户后，后续查询失败并显示错误
1> CREATE LOGIN JohnyBonzela WITH PASSWORD = '***#'
2> GO
1> CREATE LOGIN JohnyBonzela1 WITH PASSWORD = '***#'
2> GO
Msg 15404,Level 16,State 22,Server mssql-ubuntu,Line 1
Could not obtain @R_537_4045@ion about Windows NT group/user 'WIN2016\mssqlUser',error code 0x80090304.
注意：首次创建账号运行良好，后续查询执行出现问题
我找到了这篇 MS 文章，但也没有运气https://techcommunity.microsoft.com/t5/sql-server-support/error-15404-could-not-obtain-information-about-windows-nt-group/ba-p/1027461
这是我的 key tab 文件条目
user@mssql-ubuntu:~$ sudo klist -kt /var/opt/mssql/secrets/mssql.keytab
Keytab name: FILE:/var/opt/mssql/secrets/mssql.keytab
KVNO Timestamp Principal
---- ----------------- --------------------------------------------------------
2 06/25/21 12:31:13 MSsqlSvc/mssql-ubuntu.WIN2016.LOCAL:[email protected]
2 06/25/21 12:31:13 MSsqlSvc/mssql-ubuntu.WIN2016.LOCAL:[email protected]
2 06/25/21 12:31:13 MSsqlSvc/mssql-ubuntu:[email protected]
2 06/25/21 12:31:13 MSsqlSvc/mssql-ubuntu:[email protected]
2 06/25/21 12:31:13 mssql[email protected]
2 06/25/21 12:31:13 mssql[email protected]
2 06/25/21 12:31:13 mssql[email protected]
2 06/25/21 12:31:13 mssql[email protected]
user@mssql-ubuntu:~$ sudo klist -kt /etc/krb5.keytab
Keytab name: FILE:/etc/krb5.keytab
KVNO Timestamp Principal
---- ----------------- --------------------------------------------------------
1 06/17/21 22:15:19 restrictedkrbhost/mssql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/MSsql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/mssql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/MSsql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/mssql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/MSsql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/mssql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/MSsql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/mssql[email protected]
1 06/17/21 22:15:19 restrictedkrbhost/MSsql[email protected]
1 06/17/21 22:15:19 host/mssql[email protected]
1 06/17/21 22:15:19 host/MSsql[email protected]
1 06/17/21 22:15:19 host/mssql[email protected]
1 06/17/21 22:15:19 host/MSsql[email protected]
1 06/17/21 22:15:19 host/mssql[email protected]
1 06/17/21 22:15:19 host/MSsql[email protected]
1 06/17/21 22:15:19 host/mssql[email protected]
1 06/17/21 22:15:19 host/MSsql[email protected]
1 06/17/21 22:15:19 host/mssql[email protected]
1 06/17/21 22:15:19 host/MSsql[email protected]
1 06/17/21 22:15:19 MSsql[email protected]
1 06/17/21 22:15:19 MSsql[email protected]
1 06/17/21 22:15:19 MSsql[email protected]
1 06/17/21 22:15:20 MSsql[email protected]
1 06/17/21 22:15:20 MSsql[email protected]
我需要总是在 CREATE LOGIN 之后重新登录 Mssql Server？任何想法为什么会发生..这 link 是否有意义？
P.S. ：mssql.keytab 的 KVNO 显示为 2，而 krb5.keytab 的 KVNO 显示为 1。这里有什么区别吗？?
从域控制器创建的用户具有以下访问权限
CREATE LOGIN [WIN2016\mssqlUser] FROM WINDOWS;
ALTER SERVER ROLE [sysadmin] ADD MEMBER [WIN2016\mssqlUser];
GO
解决方法
暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！
如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。
小编邮箱:dio#foxmail.com (将#修改为@）