Kerberos security on Windows 2003 using Sharepoing 2007

Kerberos security on Windows 2003 using Sharepoing 2007

am 21.01.2007 03:40:29 von Jean-Marc Blaise

Hello,

I spend last few days trying to setup excel services to connect to SQL
Server Analysis Services on different machine using Kerberos without any
luck, so I would really appreaciate any help I could get here.
Few questions I have are:
I have IIS on machine MyMachine1 but I created website on that machine
using host header so I access site using http://MyAppName1. Should I add spn
on MyAppName1? Should I specify port?

Thanks

Re: Kerberos security on Windows 2003 using Sharepoing 2007

am 22.01.2007 05:36:32 von Ken Schaefer

a) YOu need to add HTTP/myAppName1 as an SPN under either the computer
account (if running web app pool under Network Service, LocalSystem or Local
Service) or user account (if running web app pool under custom user account)

b) Ensure that the account is permitted to delegate

c) Ensure that IIS is sending WWW-Authenticate: Negotiate header to client

Cheers
Ken

"Nobody" wrote in message
news:%230qyDWQPHHA.2468@TK2MSFTNGP06.phx.gbl...
> Hello,
>
> I spend last few days trying to setup excel services to connect to SQL
> Server Analysis Services on different machine using Kerberos without any
> luck, so I would really appreaciate any help I could get here.
> Few questions I have are:
> I have IIS on machine MyMachine1 but I created website on that machine
> using host header so I access site using http://MyAppName1. Should I add
> spn on MyAppName1? Should I specify port?
>
> Thanks
>
>