Having strange Kerberos behaviour with Delegation
Hi everyone, I'm having issues regarding setting up delegation:
I've got the following error: datatype cannot be converted to/from a native DS datatype
I will explain a few.
We've set up DNS as follows:
SharePoint
dev.portal.company.net (svc-dev-sp-webapp)
test.portal.company.net (svc-test-sp-webapp)
acc.portal.company.net (svc-acc-sp-webapp)
portal.company.net (svc-sp-webapp)
Web Service
dev.webservice.company.net (svc-dev-webservice)
test.webservice.company.net (svc-test-webservice)
acc.webservice.company.net (svc-acc-webservice)
webservice.company.net (svc-webservice)
We've set-up kerberos for the service accounts with their app pool. All sites run on another machines. So for every environment their are machine.
We enabled delegation between svc-dev-sp-webapp -> svc-dev-webservice (Works perfectly)
When we do this for test / acc / prod we're having problems with datatype cannot be converted to/from a native DS datatype
When we enable delegation test (svc-test-sp-webapp) -> acc (svc-acc-webservice) we don't run in any problems. So crossing works perfectly.
But yet, we don't want crossing of service accounts. Anyone have a clue?
The problem here I think is that Active Directory (Windows Server 2003 Native Domain) is corrupted by upgrading from Windows 2000 to Windows Server 2003 in the past. Is this know behaviour? Or is something really wrong here?
Thanks in advance.
May 26th, 2011 5:33pm
Thanks, I shall check your information, and check if I can find anything. If there is something wrong hopefully I will find the information.
I will come back when I have new information.
Thanks in advance.
Free Windows Admin Tool Kit Click here and download it now
May 27th, 2011 8:32am


