Integrated Security Connection Issues

got some connection issues.  =)  started when our ad servers moved windows 2008 server.. phased in servers got worse.  happens when connection being opened server using integrated security , goes beyond sql server authenticates active directory (the error along lines of timeout expired).  examples:  crystal reports via odbc (timeout expired errors), sql client, sql server enterprise manager same errors, connecting active directory retrieve groups, same errors.  this happens different boxes interesting thing is intermitent.  if try connect 2 or 3 more times it connect after 2-3 attempts , may continue connect few hours until happens again.  the issue sporadic , cannot recreate certainty.  here's have tried / information:

1.)  using dotted ip address , specifying port in case it's name resolution issue (would mitigate it?.. assumed so).
2.)  telling odbc driver use tcp instead of named pipes.
3.)  firewalls off on our sql server's in question.
4.)  have router acl's in place, they're supposed letting domain servers through.. i'm not familiar enough protocol know if changes ports dynamically, etc trip acl's up.  if so, need have our network admin allow through?
5.)  have java web-site on linux box not have these issues (it using sql authentication).
6.)  logged packets on server running reports , around time 1 of timeout's occured noticed dropped packets between box , ad.  i'm not network technician, not sure if that's normal or not.  ;p  used new network monitor tool microsoft to (the new version netmon).
7.)  tcp & named pipes enabled, sql browser disabled, 1 instance of sql server 2005 running.
8.)  event logs of servers (i don't have access dc's) riddled events this:  "1/15/2008 10:50:15 session setup windows nt or windows 2000 domain controller \\xx-xxxxx-adsdc06.ads.xx.xxx domain ads not responsive.  the current rpc call netlogon on \\xx-xxx-xxxxx \\xx-xxxxx-adsdc06.ads.xx.xxx has been cancelled.", "the session setup windows nt or windows 2000 domain controller domain ads not responsive.  the current rpc call netlogon on has been cancelled.", "sspi handshake failed error code 0x8009030c while establishing connection integrated security; connection has been closed. [client: xxx.xx.xx.xxx]"


i need direction go in has become critical issue since have these connections failing throughout day in production environments.  most of have read addresses perisistent issues , not ones come , go.  appreciated.   :)  

 

hi,

 

yes, analysis correct. when using sql server authentication, logins created in sql server not based on windows user accounts. both user name , password created using sql server , stored in sql server. means has nothing domain controller. when user connects through windows user account, sql server validates account name , password using windows principal token in operating system. since issue occurs sporadically, networking issue.

 

when “our gateway router seems timing out 5% of time rate of failure we've seen”, mean can confirm router drops network packets or isn’t working when issue occurs? suggest contact manufacturer of router have checked, in order narrow down cause of issue.

Windows Server  >  Directory Services