All versions of DirectControl when pre-creating computers
When attempting to pre-create a server, a popup message opens that says a 'constraint violation has occurred' Cause:
A servicePrincipalName conflict has occurred.Resolution:
Run the following command for each server name to find the servicePrincipalNames that are conflicting so one can be changed as they must be unique for each machine:
dsquery * forestroot -filter "(|(servicePrincipalName=afpserver/servername*)(servicePrincipalName=cifs/servername*)(servicePrincipalName=ftp/servername*)(servicePrincipalName=host/servername*)(servicePrincipalName=http/servername*)(servicePrincipalName=ipp/servername*)(servicePrincipalName=nfs/servername*))" -attr distinguishedName servicePrincipalName
If a record is returned from the above query and the SPN is expected to exist for another program/application, such as Hadoop, use the following steps to pre-create the computer:
When preparing a UNIX computer with Access Manager, manually remove the four HTTP, NFS SPN’s (shortname and FQDN each) from the list to be generated during the wizard.
Using Powershell, use the -spn switch to only add the SPNs listed:
Eg. New-cdmManagedComputer -zone “[zone dn]” -name [ComputerName] -spn "cifs/[ComputerName],cifs/[ComputerName].domain.com,ftp/[ComputerName],ftp/[ComputerName].domain.com"