Finally! A tool to help with Kerberos delegation!

I ran across a useful utility that helps both in explaining and diagnosing Kerberos delegation setup.

The utility is really nicely done. You just put it on your web server, and then browse to the page. The good stuff is green and the errors are in red. The great thing is that it has in-line explanations of everything and additional steps to help fix the problem!

The utility is specifically targeted at showing whether delegation will work and explaining in detail why it might not. It also allows you to “add a backend” server to the test so that you can check whether the downstream system can be accessed via delegation.

Info:
http://blogs.iis.net/bretb/archive/2008/03/27/How-to-Use-DelegConfig.aspx

Download:
http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1434

There is also a really nice, in depth explanation of Service Principal Names (SPNs) here:
http://blogs.iis.net/brian-murphy-booth/archive/2007/03/09/the-biggest-mistake-serviceprincipalname-s.aspx

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Create a website or blog at WordPress.com

Up ↑

%d bloggers like this: