I'm attempting to troubleshoot why windows authentication is failing for a website hosted in IIS at a customer site. When executing
setspn -l serviceUser to list the spns associated with a service account we get the following output
Registered ServicePrincipalNames for CN=serviceUser,CN=Users,DC=test,DC=local: http/service.test.local test\serviceUser
However when we search for the spn using
setspn -q http/service.test.local we get the following output:
Checking domain DC=test,DC=local No such SPN found.
What would cause the spn to be found one way but not the other?