Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

This is my first kerberos/iis integration, so the error is probably something silly.

Every time at startup the webserver logs Event ID 3, Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN

Ive tried setting the SPN to both the host running the webserver, and the username the app pool is running as (and both, although i suspect that is completely wrong). Both machine and service accounts are trusted for kerberos delegation.

In both cases the target name is that of the domain controller@domain rather than webserver@domain.

i would appreciate any direction the community can offer.

share|improve this question
Did you configure the SPN on both accounts at the same time? This will not work. To check for duplicate SPN's, run the command: "setspn /x". Also, could you post the (syntax) of the SPN you configured? – Thomas Vochten Oct 4 '10 at 11:45
i had, in fact, done that at one point. i cleared the duplicate SPNs off, and still got the same error. – Devnull Oct 5 '10 at 18:22
setspn /x isnt a valid switch on this version, so it didnt return anything. syntax is currently: http/hostname.domain.com – Devnull Oct 5 '10 at 18:32

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.