"Kerberos delegation .. end to end" Part II

"Kerberos delegation .. end to end" Part III

Spat's WebLog (Steve Patrick) — Mon, 26 Nov 2007 19:22:51 GMT

When we last left off, we had just installed SQL. Also my standard disclaimer for this series: First

Troubleshooting Kerberos Problems

Vu's Technical Notepad — Tue, 15 Apr 2008 01:20:27 GMT

Last week, I spent an all-nighter troubleshooting a Kerberos issue for a MOSS installation. Although

re: "Kerberos delegation .. end to end" Part II

Ewan Sadie — Thu, 16 Oct 2008 11:16:34 GMT

Instead of maintaining the SPN attribute yourself via setSPN you can via ADSIedit give the SELF user of the service account READ/WRITE permissions to servicePrincipalName. SQL will maintain the SPN itself every time you restart SQL.

e.g.

Select properties of the account SVC_MSSQLServer.

select the security tab and locate the SELF user.

Click the Advanced tab.

Select effective permissions tab.

check READ/WRITE on servicePrincipalName

restart SQL