Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-7547: Add Audit Store database wizard fails with following error, "A constraint violation occurred"

Centrify DirectAudit ,  

30 September,16 at 08:41 PM

Applies to: 

All versions of DirectAudit in environment with Windows 2012R2 Domain Controller

Problem:

Getting the following error message when trying to add an Audit Store database with console wizard

"A constraint violation occurred" 

Cause:

If the service account of SQL Server hosting the Audit Store database has recently been switched,  the step to clear the old SQL SPN (Service Principal Name) entries from the servicePrincipalName attribute of the original service account might be overlooked or forgotten.  

If the above is true and DBA has not yet set the required SQL SPN on the new service account, the Audit Manager console will try to stamp the correct SPN entries automatically while creating a new Audit Store database. While doing so, if the Audit Manager console is communicating with a Windows 2012 R2 Domain Controller, this operation will fail because the Windows 2012 R2 Domain Controller verifies whether the SPN being stamped is unique across the forest or not and this check will fail because the old SPN entries have not yet been removed from the old service account.


Resolution: 

When switching SQL Server service account, always make sure you update the servicePrincipalName attribute of the old service account and remove all values corresponding to the SQL Server.


External references - https://msdn.microsoft.com/en-us/library/ms191153(v=sql.110).aspx

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.