Kerberos - create the SPNs for your SQL server service account

Question

Dear all,

I am following the microsoft documentation on how to configure Kerberos authentication (Office SharePoint Server) from TechNet as we are experiencing problems with the Kerberos setup. Though it is a doc for when you do it all from scratch and my environment is already in place I am trying to stick to it anyway. I got to the point they ask: Create the SPNs for your SQL server service account (which we never did) and my question is: We have installed the instance under LOCAL ACCOUNT. How do I go with the SPNs in that case. Do I use the machine name instead of the domain accounts?

Thanks in advance.

Regards,

Gonçalo

 

 

---

Gonçalo

Answer 1

You need to use domain accounts for Kerberos to work properly. The machine name method may work but it would not be too difficult to change the SQL Server service account. Just make sure it has the same permissions as the account you're replacing.

---

Wahid Saleemi Sr. Consultant, Avanade http://www.wahidsaleemi.com

Answer 2

Hi, 

i just went through a related problem have a look at this  http://go4zero.wordpress.com/2010/11/10/event-id-27745/

Answer 3

Yes Mina,

Thanks.

I forgot to follow up on this one. I eventually sorted out with this you sent. I have documented it on:

http://troubleshootingsharepoint.blogspot.com/2010/07/check-kerberos-authentication.html to check and:

http://troubleshootingsharepoint.blogspot.com/2010/07/add-spn-entry-for-kerberos-sql-server.html

to solve.

Thanks.

Regards,

Gonçalo

 

---

Gonçalo