Steve Caravajal's Ramblings

I have followed all steps precisely in Martin Kearn's kerberos part 1 post.  Still no luck, can't load anything on server except CA.  I have enabled kerb debugging.  Do I need to create an SPN for the search users?  I have 2 MOSS servers, 64bit, 1 for CA/web and the other for search/index.  I have spns set up correctly for CA/Web, but what about Search/Index box? thanks for any help you can provide.

Give it a REST! [Via: Anil John ] GWT a Year Later: Was it the correct level of abstraction? [Via: Dietrich...

Yes all of your accounts must have SPN's in my case I did it this way:

Use the Setspn.exe tool to add an SPN for the domain account. To do so, type the following line at the command prompt, and then press ENTER:

setspn -A HTTP/[ServerName].Microsoft.com microsoft\SRV_OSS_DEV_Farm

setspn -A HTTP/[ServerName].Microsoft.com microsoft\SRV_OSS_DEV_App001

setspn -A HTTP/[ServerName] microsoft\SRV_OSS_DEV_App001

setspn -A HTTP/[ServerName].Microsoft.com microsoft\SRV_OSS_DEV__SSPROC

setspn -A HTTP/[ServerName] microsoft\SRV_OSS_DEV__SSPROC

setspn -A HTTP/[ServerName].Microsoft.com microsoft\SRV_OSS_DEV_App002

setspn -A HTTP/[ServerName] microsoft\SRV_OSS_DEV_App002

Second Step

To configure the IIS server to be trusted for delegation, using a domain account follow these steps:

1. Start Active Directory Users and Computers.

2. In the left pane, click Computers.

3. In the right pane, right-click the name for each these IIS servers, and then click Properties.

4. Click the General tab, click to select the Trust computer for delegation check box, and then click OK.

a. microsoftportaldev02

b. microsoftportaldev03

c. microsoftindexdev01

5. Quit Active Directory Users and Computers.

What about Kerberos in SharePoint 2007... From Steve Carvajal's Blog , some links to Martin Kearn's