MOSS Forum

Ask Question   UnAnswered
Home » Forum » MOSS       RSS Feeds

Kerberos: MSSP SPN not working

  Asked By: Deepak    Date: Nov 23    Category: MOSS    Views: 1550

We are attempting to initiate Kerberos to work with MOSS and WSS3.0 in a Windows
Server 2008 environment. All seems to be working according to tests except the

our ssp site is located at: devmoss001:3500/ssp/admin
Our provider is: SharedServices1

Our spns for our ssp account are:
MSSP/<host:port>/<SSP name>.

All tests work except testing the virtual-derecotry-level shared services.

Using Network Monitor, we get: for the request realm (other protocol packets are
KerberosV5:TGS Request Realm: (FQDN) Sname: host/fqdn rather than
KerberosV5:TGS Request Realm: (FQDN) Sname: MSSP/devmoss01:56738/SharedServices1

We used a tool to test configuration as well, and the tool says we do not have a
usable spn for our SSP account:

It recommends using setspn.exe –A MSSP/HTTP://DEVMOSS01:3500/SSP/admin:56737
domain\ssp account

When trying that, we receive an error saying the input is not valid. We
attempted adding it to domain controller under spn for the ssp account, but
received the same error.

Since we are using IE 7, we did not configure SPNs to use port numbers as it
should be included.

We have been working on this for several weeks and are at a loss. If anyone has
any suggestions, it would be greatly appreciated.



No Answers Found. Be the First, To Post Answer.

Didn't find what you were looking for? Find more on Kerberos: MSSP SPN not working Or get search suggestion and latest updates.