Hello all,
Well its been some time since I have posted anything up here but this video is a long one, but also very important. IT IS KERBEROS. Since this one is so long and covers so much I added an index/TOC to it, Simply open the HTML file associated with this project in the ZIP. If you do not want to use this you can just watch the straight WMV.
One item that I did not explain very well was the Kerberos Time Sensitivity. By default if there is greater than 5Min difference between 2 systems involved in a authentication Kerberos will fail. Check out the following article for more info.
http://technet.microsoft.com/en-us/library/cc780011.aspx
for advanced information on Constrained Delegation and Protocol Transition check out the following link
http://technet.microsoft.com/en-us/library/cc739587.aspx
For wireshark info
http://www.wireshark.org/
The SETSPN tool is in the 2003 support tools downloadable from here
http://www.microsoft.com/downloads/details.aspx?FamilyID=96a35011-fd83-419d-939b-9a772ea2df90&DisplayLang=en
and finally the video
Here is the Link to the zip download
http://www.k2underground.com/files/folders/howtok2/entry27136.aspx
After you watch the video Here are some great resources.
http://blogs.msdn.com/james_world/archive/2007/08/20/essential-guide-to-kerberos-in-sharepoint.aspx
http://www.pluralsight.com/wiki/default.aspx/Keith.GuideBook.HomePage
http://blogs.msdn.com/martinkearn/archive/2007/04/23/configuring-kerberos-for-sharepoint-2007-part-1-base-configuration-for-sharepoint.aspx
http://www.digwin.com/view/moss-and-kerberos-configuration
http://www.microsoft.com/msj/0899/kerberos/kerberos.aspx
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx
http://windowsitpro.com/article/articleid/97376/use-kerberos-to-secure-moss-2007.html
http://www.sharepointblogs.com/spfromscratch/archive/2008/02/11/configuring-kerberos-autentication-on-moss-2007.aspx
http://technet2.microsoft.com/windowsserver/en/technologies/featured/kerberos/default.mspx
http://blogs.inetium.com/blogs/jdevries/archive/2006/04/21/more-on-kerberos-and-delegation-troubleshooting.aspx
http://support.microsoft.com/kb/907272
http://www.microsoft.com/downloads/details.aspx?FamilyID=99B0F94F-E28A-4726-BFFE-2F64AE2F59A2&displaylang=en
A Great book
http://www.amazon.com/Windows-Server-2003-Security-Infrastructures/dp/1555582834/ref=sr_1_14?ie=UTF8&s=books&qid=1213632286&sr=8-14
Highly recommended! Even though I had rather extensive experience troubleshooting kerberos configuration this video still gave me additional (and simpler) ways to determine what is going wrong. Thanks!
Thanks~