MSSP SPN not working?
Hi, I have applied SP2 with April CU.I am trying toset SSP for kerberos auth (MSSP SPNs are registered, added KerberosSpnFormat=1 on all servers)When I ran stsadm setwebserviceauthn -negotiate, search no longer works. When I click on the search settings on query server, I get An unhandled exception occurred in the user interface.Exception Information: Could not connect to server SERVER. This error might occur if the server is not responding to client requests, the firewall or proxy configuration is preventing the server from being contacted, or the search administration Web service is not running on the affected server. Per packet capture, the servers are still using SNAME HTTP/SERVER.DOMAIN.COM (I think it should use MSSP/SERVER)KerberosV5KerberosV5:TGS Request Realm:domain.com Sname: HTTP/SERVER.domain.comI also confirmed thesame behaviour on win2k3 and win2k8 (moss sp2/april CU)I appreciate any comments. Am I missing something or is this not supported with SP2 anymore? Thanks.BT
July 19th, 2009 11:56pm

Hi BT, Yes, if Kerberos was configured for your search service, the package should be KerberosV5 KerberosV5:TGS Request Realm: domain.com Sname: MSSP/SERVER:56738/SSPName as you did not mention crawl account, I suppose you use the SSP account for crawl. From your description, I could not locate the root cause of your configuration, so I suggest you to follow the official article to examine the configuration: Configure Kerberos authentication (Office SharePoint Server) (http://technet.microsoft.com/en-us/library/cc263449.aspx) Hope the information can be helpful. -lambertSincerely, Lambert Qin | Microsoft TechNet Managed Forum Support Posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2009 5:43am

Hi Lambert, Yes, I am using the SSP account for crawl. I have also followed the exact steps given in the technetarticle you have mentioned (http://technet.microsoft.com/en-us/library/cc263449.aspx) (except I used setspn but verified SPNs via adsiedit).I am not even sure at this point where to start from as the call for SPN is http. If you can give me some direction on where to start troubleshooting, I really appreciate. Have you heard any similar issues with SP2? Thank you.BTW, I was also using kerbtray to catch each kerb ticket. There is none with MSSP. Thank you.
July 20th, 2009 5:12pm

Hello BT,i have the same problem: http://social.msdn.microsoft.com/Forums/en-US/sharepointadmin/thread/d4d12d41-b051-4669-86fe-863ffe1ac135Did you solve thisproblem?Horst
Free Windows Admin Tool Kit Click here and download it now
July 27th, 2009 2:45pm

I could not solve this issue yet. I set ssp back to NTLM.
July 27th, 2009 4:43pm

I am facing the same issue. Could you able to fix it?
Free Windows Admin Tool Kit Click here and download it now
April 15th, 2010 10:16pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics