|
Home > Archive > IIS Server Security > January 2007 > Kerberos security on Windows 2003 using Sharepoing 2007
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Kerberos security on Windows 2003 using Sharepoing 2007
|
|
| Nobody 2007-01-21, 1:25 am |
| Hello,
I spend last few days trying to setup excel services to connect to SQL
Server Analysis Services on different machine using Kerberos without any
luck, so I would really appreaciate any help I could get here.
Few questions I have are:
I have IIS on machine MyMachine1 but I created website on that machine
using host header so I access site using http://MyAppName1. Should I add spn
on MyAppName1? Should I specify port?
Thanks
| |
| Ken Schaefer 2007-01-22, 1:29 am |
| a) YOu need to add HTTP/myAppName1 as an SPN under either the computer
account (if running web app pool under Network Service, LocalSystem or Local
Service) or user account (if running web app pool under custom user account)
b) Ensure that the account is permitted to delegate
c) Ensure that IIS is sending WWW-Authenticate: Negotiate header to client
Cheers
Ken
"Nobody" <Nobody@nobody.com> wrote in message
news:%230qyDWQPHHA.2468@TK2MSFTNGP06.phx.gbl...
> Hello,
>
> I spend last few days trying to setup excel services to connect to SQL
> Server Analysis Services on different machine using Kerberos without any
> luck, so I would really appreaciate any help I could get here.
> Few questions I have are:
> I have IIS on machine MyMachine1 but I created website on that machine
> using host header so I access site using http://MyAppName1. Should I add
> spn on MyAppName1? Should I specify port?
>
> Thanks
>
>
|
|
|
|
|