Browse by Tags

Tagged Content List
  • Wiki Page: Kerberos for Microsoft BI - With Delegation and SPN references for SQL, SSRS, SSAS, and SharePoint

    Here are the articles that can help with Kerberos, delegation, and getting Integrated Windows Authentication working with the Microsoft BI stack. What is the Microsoft BI stack? http://www.microsoft.com/bi lists SQL Server, SharePoint and Office as part of the Microsoft BI stack. Historically...
  • Wiki Page: List all SPNs Used in your Active Directory

    There are a lot of hints & tips out there for troubleshooting SPNs (service principal names). Listing duplicate SPNs is fairly easy, use the “setspn -X” command and you’ll find out. But how do you find out which SPNs are used for which users and computers are used for this? Quite some scripts...
  • Wiki Page: How a Client Application Finds a Service (SPN)

    Table of Contents How a Client Composes an SPN Differences between the delegation tab betweens the DC, Client computer & User account Credits See also Clients find service objects by querying the directory. The client can limit the scope of the query to its domain, or it can search the entire...
  • Wiki Page: BizTalk: Service Principal Name (SPN) List

    BizTalk is a "client" while SQL is the "server". In some situations, an extra hop is added, like a SharePoint server. In a double-hop scenario, Service Principal Names (SPN) are used by Active Directory to authenticate a service. In this BizTalk-SQL Server-SharePoint Server scenario...
  • Wiki Page: FIM 2010: Kerberos Authentication Setup

    The goal of this article is to provide some background information regarding the Kerberos related configuration steps of the FIM Portal and FIM Service. The article has been written in such a way so that most of the points can in fact be used for any application requiring Kerberos. This article will...
  • Wiki Page: Service Principal Names (SPNs) SetSPN Syntax (Setspn.exe)

    Table of Contents SPN Purpose SPN Format SetSPN Viewing or Checking SPN Registrations SPN Registration Errors Related to SPN Registration or Configuration Manually Registering SPNs Troubleshooting SPN Issues Resolving SPN Registration Issues SPN Lookup Errors Delegation External Articles SPN Purpose...
  • Wiki Page: PCNS: Troubleshooting Event ID 6025

    Table of Contents Overview The password change notification target could not be authenticated Status 1753: There are no more endpoints available from the endpoint mapper Status 1747: The authentication service is unknown Additional Troubleshooting Tool Suggestions Appendix Validate ServicePrincipalName...
  • Wiki Page: Troubleshooting AD Replication Error 8589 The DS Cannot Derive A Service Principal Name (SPN)

    This article describes symptoms, cause and resolution steps for cases where Active Directory operations fail with Win32 error 8589. This article is part of a series on troubleshootiung Active Directory replication error, and is also one of the errors reported by the Active Directory Replication...
  • Wiki Page: Kerberos Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN (dsforum2wiki)

    This issue can occur if no SPN has been set for a specific service, please refer to the resolutions in the section 0x7 - KDC_ERR_S_PRINCIPAL_UNKNOWN of the following article to troubleshoot the issue. Service Logons Fail Due to Incorrectly Set SPNs To understand, detect, correct, and verify...
  • Wiki Page: FIM 2010 R2: Kerberos Authentication Setup

    One of the new features in FIM 2010 R2 (currently BETA) is the addition of the extranet scenario for the SSPR (Self Service Password Reset). This feature comes with additional IIS websites and thus authentication configuration to perform. The goal of this article is to explain which SPN’s (Service...
Page 1 of 1 (10 items)
Can't find it? Write it!