WARNING: Unable to set SPN mapping data

Back To HaCluster and Active Directory

When creating a Kerberos ticket on the Active Directory for the HaCluster feature, you receive this error:

Failed to set property 'servicePrincipalName' to 'HTTP/xxxx.xxx' on Dn 'CN=xxx,CN=xxx,DC=xxx,DC=xx': 0x13.
WARNING: Unable to set SPN mapping data.

This means you already have an SPN defined in the Active Directory.

Use the command :

setspn -Q HTTP/xxxx.xxx

To display the information

in our example, the SPN is associated to the computer name “hacluster”

You can see on which member/computer the SPN is associated

use the following command to remove the SPN entry

setspn -d HTTP/xxxx.xxx <user name>