Below are some troubleshooting steps for if you get into trouble with Kerberos:

Kerberos Check’s

All servers need to be within 5 mins

The DAC Connection only uses NTML authentication.

If the SQL instance is was working, but has since stopped. Check to see if its still using the same port.

Check setspn -l (see Looking for Kerberos SPNs Basics)

Check the Service Account in AD Users and Computers. If the delegation tab isn’t listed then the account doesn’t have any SPN’s against it.

Check the Service account is Trusted for delegation

trblkerby

 

 

Helpful links

Register a Service Principal Name for Kerberos Connections
http://technet.microsoft.com/en-us/library/ms191153.aspx#Auto

 

SetSPN
http://social.technet.microsoft.com/wiki/contents/articles/717.service-principal-names-spns-setspn-syntax-setspn-exe.aspx

 

Troubleshooting Kerberos Authentication problems
http://blogs.technet.com/b/askds/archive/2008/05/14/troubleshooting-kerberos-authentication-problems-name-resolution-issues.aspx

 

Manage Kerberos Authentication Issues in a Reporting Services Environment
http://technet.microsoft.com/library/ff679930.aspx

 

Enable Kerberos Event Log:
http://support.microsoft.com/kb/262177

 

Channel9 – Implementing Kerberos with PerformancePoint Services and Excel Services
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2010/BIO08-INT

 

Channel9 – Configuring Kerberos for Microsoft SharePoint 2010 BI in 7 Steps
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2012/DBI304

Advertisements