Comments on: Want to test and troubleshoot Kerberos authentication to your MOSS site? http://blog.hemker.de/2008/05/16/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/ Microsoft / Windows / SharePoint / Exchange / Security Tue, 13 Oct 2009 09:30:10 +0200 http://wordpress.org/?v=2.9.2 hourly 1 By: Emmanuel ISSALY http://blog.hemker.de/2008/05/16/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/comment-page-1/#comment-111 Emmanuel ISSALY Wed, 19 Aug 2009 07:56:28 +0000 http://hemker.mcseboard.de/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/#comment-111 Nice post, but the pictures look broken on my side. Nice post, but the pictures look broken on my side.

]]> By: bookerdog http://blog.hemker.de/2008/05/16/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/comment-page-1/#comment-16 bookerdog Mon, 10 Nov 2008 21:36:07 +0000 http://hemker.mcseboard.de/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/#comment-16 Very useful post, though I still haven't figured out my issue yet. But I wanted to mention to anybody else that might try and use the script posted on the Microsoft site, there is a small, but very important typo in the code that they have posted. The first line reads: 'Dim argSPN, argUser, argComputer, spnToSearch, objCategory, strFilter , searchCategory, domainInput Well the apostrophe in VB is how you comment out a line, so all of these variable declarations are commented out. Delete the first apostrophe, resave the script, and it will work as advertised. Very useful post, though I still haven’t figured out my issue yet. But I wanted to mention to anybody else that might try and use the script posted on the Microsoft site, there is a small, but very important typo in the code that they have posted.

The first line reads:
‘Dim argSPN, argUser, argComputer, spnToSearch, objCategory, strFilter , searchCategory, domainInput

Well the apostrophe in VB is how you comment out a line, so all of these variable declarations are commented out.

Delete the first apostrophe, resave the script, and it will work as advertised.

]]> By: Christian http://blog.hemker.de/2008/05/16/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/comment-page-1/#comment-15 Christian Thu, 17 Jul 2008 15:51:40 +0000 http://hemker.mcseboard.de/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/#comment-15 Hi Adam, Windows Server 2008 has an integrated search for duplicate SPNs: Identify the duplicate SPN To identify the duplicate SPN: 1. Log on to the computer referenced in the event log message. If this computer is not running Windows Server 2008, you must download and install the Windows Server 2003 Resource Kit, which includes setspn.exe. 2. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. 3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. 4. Type setspn -X. 5. The output of this command will show the duplicate SPNs. 6. Use the following procedure to remove one of the duplicate SPNs. http://technet2.microsoft.com/windowsserver2008/en/library/39b7428a-2b45-4640-9bd7-46833007d38d1033.mspx?mfr=true Regards, Christian Hi Adam,

Windows Server 2008 has an integrated search for duplicate SPNs:

Identify the duplicate SPN
To identify the duplicate SPN:
1. Log on to the computer referenced in the event log message. If this computer is not running Windows Server 2008, you must download and install the Windows Server 2003 Resource Kit, which includes setspn.exe.
2. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
4. Type setspn -X.
5. The output of this command will show the duplicate SPNs.
6. Use the following procedure to remove one of the duplicate SPNs.
http://technet2.microsoft.com/windowsserver2008/en/library/39b7428a-2b45-4640-9bd7-46833007d38d1033.mspx?mfr=true

Regards,

Christian

]]> By: caulkett http://blog.hemker.de/2008/05/16/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/comment-page-1/#comment-14 caulkett Thu, 17 Jul 2008 14:54:25 +0000 http://hemker.mcseboard.de/want-to-test-and-troubleshoot-kerberos-authentication-to-your-moss-site/#comment-14 Hey Christian, Awesome post, has come in really handy. I wouldn’t mind some help if you don’t mind. I’m trying to use the SPN helper script but it keeps popping up a usage window. As if I’m getting the path wrong. Have you seen this before? Im using - cscript spnhelper.vbs /f:duplicatespn /spn:HTTP/intranetportal It is worth mentioning that I’m using Windows Server 2008. Thanks for your time Hey Christian,

Awesome post, has come in really handy.

I wouldn’t mind some help if you don’t mind. I’m trying to use the SPN helper script but it keeps popping up a usage window. As if I’m getting the path wrong. Have you seen this before?

Im using -
cscript spnhelper.vbs /f:duplicatespn /spn:HTTP/intranetportal

It is worth mentioning that I’m using Windows Server 2008.

Thanks for your time

]]>