| Previous | Next |
| SEC_E_OUT_OF_SEQUENCE | SEC_E_BAD_PKGID |
SEC_E_NO_AUTHENTICATING_AUTHORITY
SEC_E_NO_AUTHENTICATING_AUTHORITY means that SSPI could not contact an authority required to authenticate the security context. During a domain-based negotiation, the domain name can be wrong, the domain can be unreachable, or the trust relationship can be unavailable.
How to separate the causes
- First confirm DNS resolution and network reachability to the expected domain services.
- Then verify the target domain name and configured trust relationship.
- Correlate the client result with domain-controller and server logs before changing authentication fallbacks.
Important distinction
This does not necessarily mean the user supplied bad credentials. The authentication authority might never have been reached to evaluate them.
Microsoft: InitializeSecurityContext (Schannel) · SSPI Status Codes
Looking for a different code? Search another status or error code.