Troubleshooting Kerberos / Links Basics
Below are some troubleshooting steps for if you get into trouble with Kerberos:
All servers need to be within 5 mins
The DAC Connection only uses NTML authentication.
If the SQL instance is was working, but has since stopped. Check to see if its still using the same port.
Check setspn -l (see Looking for Kerberos SPNs Basics)
Check the Service Account in AD Users and Computers. If the delegation tab isn’t listed then the account doesn’t have any SPN’s against it.
Check the Service account is Trusted for delegation
Register a Service Principal Name for Kerberos Connections
Troubleshooting Kerberos Authentication problems
Manage Kerberos Authentication Issues in a Reporting Services Environment
Enable Kerberos Event Log:
Channel9 – Implementing Kerberos with PerformancePoint Services and Excel Services
Channel9 – Configuring Kerberos for Microsoft SharePoint 2010 BI in 7 Steps