December 2009 - BLACKTOP: Writings From the Road

Most Recent Most Viewed Most Commented

  • Kerberos: Duplicate SPNs

    One of my favorite new features of Windows Server 2008 is the addition of the -X parameter to the SETSPN command. It finds duplicate SPNs. This can be very helpful when setting up and troubleshooting Kerberos. Except it doesn't always work. Instead...

  • IIS 7, Kerberos, And the Checkbox of Doom

    When configuring a web site to use Kerberos authentication on IIS 7 you might be tempted to use Kernal Mode Authentication. There is a bug in HTTP.SYS that can cause your server to frequently blue-screen and reboot. By frequent I mean every few seconds...