locked
kerberos question RRS feed

  • Question

  • We are probably going to setup kerberos on our sharepoint servers.

    I found all the guides on what to do and everything.  My problem is that our current network admins were hired after our network was setup, so nobody knows if kerberos is even setup in the AD/DNS servers.

    Is there a way to check if kerberos has been setup on the servers? or is it available by default and I just need to create SPN's and select allow delegation on the servers and service accounts that I will be implementing it on? 
    Tuesday, November 4, 2008 12:42 AM

Answers

  • Any time you see in the docs that you have to make sure you domain is set up for kerberos all they are meaning is that you have to have the proper SPNs and delegation settings set - that's it.
    Tuesday, November 4, 2008 2:02 AM
  • Hi,

    the best way would be if the admin's made a documentation as Gary said.

    You could check the SPN Settings with the SetSPN tool:

    Check the "Viewing SPNs" section of this document:
    http://technet.microsoft.com/en-us/library/cc773257.aspx

    Cheers,

     


    Daniel Bugday Web: http://www.sharepointforum.com/ Blog: http://www.sharepointforum.com/en-US/Blog/
    Tuesday, November 4, 2008 9:55 AM

All replies

  • Any time you see in the docs that you have to make sure you domain is set up for kerberos all they are meaning is that you have to have the proper SPNs and delegation settings set - that's it.
    Tuesday, November 4, 2008 2:02 AM
  • Hi,

    the best way would be if the admin's made a documentation as Gary said.

    You could check the SPN Settings with the SetSPN tool:

    Check the "Viewing SPNs" section of this document:
    http://technet.microsoft.com/en-us/library/cc773257.aspx

    Cheers,

     


    Daniel Bugday Web: http://www.sharepointforum.com/ Blog: http://www.sharepointforum.com/en-US/Blog/
    Tuesday, November 4, 2008 9:55 AM