Skip to Content
0
Former Member
Jul 22, 2009 at 02:38 PM

SPNEGO/Fail on the Configuration steps on the DC

32 Views

We are looking to use AD authentication to pass through into the UME in NWA CE 7.1

When following the steps we have created the service user in AD and then are looking to register service principal names (SPNs) for the J2EE Engine host name and alias and map them to the service user xxxxx

We then get the following response:

C:\Program Files\Support Tools>setspn -A HTTP/<server name> <account name>

Usage: setspn [switches data] computername

Where "computername" can be the name or domain\name

Switches:

-R = reset HOST ServicePrincipalName

Usage: setspn -R computername

-A = add arbitrary SPN

Usage: setspn -A SPN computername

-D = delete arbitrary SPN

Usage: setspn -D SPN computername

-L = list registered SPNs

Usage: setspn [-L] computername

Examples:

setspn -R daserver1

It will register SPN "HOST/daserver1" and "HOST/{DNS of daserver1}"

setspn -A http/daserver daserver1

It will register SPN "http/daserver" for computer "daserver1"

setspn -D http/daserver daserver1

It will delete SPN "http/daserver" for computer "daserver1"

What is happening and what is our next step?

Colin Cooper