On windows 2003 using IIS 6, we are trying to set up Kerberos authentication. This is working to some extent. I have setup a separate application pool with a service account. When ever I use this application pool with the pplinfo service account the user will not authenticate with activate directory. Any help would be great.
You should probably check to see if the SPN is set correctly.
If you have the support tools installed, you can run this command:
If you don't find your SPN, that's the problem.
There's a SetSPN command that should work also:
But I never can get the -L parameter to work with an account object, only a computer object. That actually might be due to rights that our AD team imposes. YMMV...