TSLS – Luke Smith

1. Configure SPN for Web Application Pool Account setspn.exe -A HTTP/’WebApplicationNETBIOSURL’ domain\’ApplicationPoolAccount’ setspn.exe -A HTTP/’WebApplicationFQDNURL’ domain\’ApplicationPoolAccount’ *Using Port numbers with kerberos causes authentication problems within IE, would always suggest using netbios or\and FQDN, if your web application has been configured to use a port number suggest creating an Alternative access mapping. 2. Trust Computer and [...]

Having intermittent problems with Kerberos working and failing try the following Make the following registry updates/changes on your moss farm and associated servers which are using kerberos Registry Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters Value: MaxPacketSize DWORD Value: 1 (hex or dec) More information: http://support.microsoft.com/kb/244474 Registry Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters DWORD Value Name: MaxTokenSize Value: ffff (hex) More information: http://support.microsoft.com/kb/327825 Enabling [...]