I am running IIS and SQL Reporting Server on the same server. IIS runs as
d\acct1 and SSRS is running as
Initially, I registered an SPN
HTTP/server.d.com for both
d\acct2 and configured both for unconstrained kerberos delegation in Active Directory.
This configuration broke kerberos because there were duplicate SPNs for
If I delete the SPN for SSRS, IIS works. If I delete the SPN for IIS, SSRS works.
Is there a way to share an SPN between two different service accounts that run on the same server such that they do not create a duplicate SPN?
Or, must I create two A records in active directory for
reports.server.d.com and use host headers to keep the two aliases straight inside each respective service?