Wednesday, November 16, 2011

Kerberos Config for Reporting Services

PORTAL   Domain\AppPoolIntranet
REPORTING:  Domain\ServiceAccountReporting
SQL Service: Domain\ServiceAccountSQL


SETSPN Commands should be executed on a Domain Controller.

setspn -s HTTP/intranet.domain.lcl " Domain\AppPoolIntranet"
setspn -s HTTP/intranet " Domain\AppPoolIntranet"
setspn -s HTTP/reporting.domain.lcl "Domain\ServiceAccountReporting"
setspn -s HTTP/reporting "Domain\ServiceAccountReporting"

setspn -s MSSQLSVC/SQLServer.domain.lcl "Domain\ServiceAccountSQL"
setspn -s MSSQLSVC/SQLServer "Domain\ServiceAccountSQL"

setspn -L "Domain\AppPoolIntranet"
setspn -L  "Domain\ServiceAccountReporting"
setspn -L  "Domain\ServiceAccountSQL"