This is my first kerberos/iis integration, so the error is probably something silly.
Every time at startup the webserver logs Event ID 3, Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Ive tried setting the SPN to both the host running the webserver, and the username the app pool is running as (and both, although i suspect that is completely wrong). Both machine and service accounts are trusted for kerberos delegation.
In both cases the target name is that of the domain controller@domain rather than webserver@domain.
i would appreciate any direction the community can offer.