Kerberos SPN registration
I am planning to configured kerberos for our sharepoint farm..i am going through the documentation have mentioned that for sql service account as mention below.this SPN registration procedure have to perform on Domain controller for sql service account as well as other sharepoint account also but will see first sql service account only.
--> MSSQLSvc/mosssql: 1424
--> MSSQLSvc/mosssql.mydomain.
In above scenario
MSSQLsvc is SQl service name
MOSSSQL is sql server name
1424 is port no.
my sql environment have two back end server with clustering they having created instance name like united\spdb10
and server name is UKIND01 and UKIND02
so could you please provide me valid value string how can I register the SPN?
do i have to add like
-> MSSQLSvc/UKIND01: 1424
--> MSSQLSvc/UKIND02.mydomain.
--> MSSQLSvc/mosssql: 1424
--> MSSQLSvc/mosssql.mydomain.
In above scenario
MSSQLsvc is SQl service name
MOSSSQL is sql server name
1424 is port no.
my sql environment have two back end server with clustering they having created instance name like united\spdb10
and server name is UKIND01 and UKIND02
so could you please provide me valid value string how can I register the SPN?
do i have to add like
-> MSSQLSvc/UKIND01: 1424
--> MSSQLSvc/UKIND02.mydomain.
ASKER
i have two database server so do i have to perform this activity on both db server by using there host name.
like
setspn -A MSSQLSvc/uksoind01: 1424 DOMAIN\serviceaccount
setspn -A MSSQLSvc/mosssql.mydomain.
setspn -A MSSQLSvc/uksoind02l: 1424 DOMAIN\serviceaccount
setspn -A MSSQLSvc/mosssql.mydomain.
if i am adding this parameter by logging on domain controller , adsiedit.msc ,N=user ,there also have to add same thing if i am not using any other method.
like
setspn -A MSSQLSvc/uksoind01: 1424 DOMAIN\serviceaccount
setspn -A MSSQLSvc/mosssql.mydomain.
setspn -A MSSQLSvc/uksoind02l: 1424 DOMAIN\serviceaccount
setspn -A MSSQLSvc/mosssql.mydomain.
if i am adding this parameter by logging on domain controller , adsiedit.msc ,N=user ,there also have to add same thing if i am not using any other method.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks a lot this info I was looking.I will perform today will let you know.
setspn -A MSSQLSvc/mosssql: 1424 DOMAIN\serviceaccount
setspn -A MSSQLSvc/mosssql.mydomain.
So yes, you do need both SPNs.
If you don't have the setspn.exe, you can download it free:
http://www.microsoft.com/downloads/details.aspx?familyid=5fd831fd-ab77-46a3-9cfe-ff01d29e5c46&displaylang=en