Assume the following site layout
- www.contoso.com - runs as CONTOSO\sitePool
- www.contoso.com/subSite1 - runs as CONTOSO\subPool1
- www.contoso.com/subSite2 - runs as CONTOSO\subPool2
The pages should use Kerberos for authentication - so I assigned the SPN HTTP/www.contoso.com to CONTOSO\sitePool, which works nice for the www.contoso.com site.
Now I want to use Kerberos for subsite1 and subsite2, too.
I cannot assign the SPN to the pools, since it is already assigned.
I also can't assign an SPN in the form of HTTP/www.contoso.com/subSiteX, since browser are not aware of this (they calculate the needed SPN with the domain name only).
So how can I use Kerberos Authentication in the sub-sites?