Re: SETSPN website doesn't work

lb wrote:
Hi all,

I try to register one of my IIS webseite with a special account. When I do that, I can't see the SPN with the SETSPN -L server1

My first command line was :

SETSPN http/mysite.prod.local prod\useradmin (pro is the domain and useradmin the account)


-L specifies to query for SPNs on a given account. As Your asp.net application is running on prod\useradmin account you should query for:
setspn -l prod\useramin

or just use adfind.exe or any other LDAP browsing\querying tool to check it

--
Tomasz Onyszko
http://www.w2k.pl/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)
.

Relevant Pages

  • Re: "Account is trusted for delegation" is not shown
    ... Did you install the support tools to run setspn? ... Where SPN is the servicename/computername ... account with the Setspn utility in the support tools on your CD. ... It should be caused by raising functional level to windows 2003. ...
    (microsoft.public.windows.server.general)
  • Re: "Account is trusted for delegation" is not shown
    ... Did you install the support tools to run setspn? ... Where SPN is the servicename/computername (MESSENGER/SERVERNAME for ... account with the Setspn utility in the support tools on your CD. ... It should be caused by raising functional level to windows 2003. ...
    (microsoft.public.windows.server.general)
  • Re: KDC Service Account
    ... Part of the KB is creating a KDC Service Account, ... Do I run setspn on the OWA server or domain controller? ... IIS and Kerberos Part 1 - What is Kerberos and how does it work? ...
    (microsoft.public.inetserver.iis.security)
  • RE: Kerberos & NTLM on IIS 6
    ... setspn -A HTTP/servername.domain.com domain\newaccountname ... Is reporting services the SQL server reporting services? ... >> account is known by AD and has a valid SPN, that's why the Web App works. ... I thought at least the default Network Services ...
    (microsoft.public.inetserver.iis.security)
  • SETSPN breaks access to IIS web site
    ... I used SETSPN to create a servicePrincipalName for the account I'm ... To confirm that SETSPN was the problem, I deleted the SPN using SETSPN ... IIS server, which was a member of Administrators on the server, could ...
    (microsoft.public.win2000.security)