We've managed to setup Kerberos for an ASP.NET 4.0 website using the following:
Web Server (IIS 7) Database server (SQL Server 2008 R2) Domain account used for delegation (http and mssqlsvc)
While this configuration works beautifully and we benefit from an effective authentication mechanism and audit trail, how do they say it, change is inevitable...
I've now been asked to add another website but it will point to a database on another server.
So I added another SPN for the other database server, but the new website fails to launch due to an authentication problem. I have since discovered this is due to a duplicate SVN (using the DelegConfig website).
I have just two questions:
i) Is Kerberos restricted in the number of svns per domain account in this setting?
ii) More importantly, how can I get this to work?
Go to the complete details ...