Hi,
We had AD manual authentication working across 3 dev servers last week. The domain admin working with me on setting up the production accounts set up a new account and created the SPN for production. Maybe this is a coincidence, but development is now broken this week.
Working my way through the excellent 'Configuring kerberos manual authentication and/or sso in distributed environments (xi 3.1 sp3 or later)' guide, I have tested that CMC is pulling groups. Test 2, testing login of client application after setting SIA service account is failing with this:
'Error logging on to server' IWZ 00001
Kerberos target name BOBJCentralMS/DOMAIN.NAME is unknown.
I checked the SIA service to make sure it is running under the service account we set up. I also ran setspn -L accountname and got the target name that is 'unknown' in the errors above.
Anyone have ideas on getting this working again?
Thanks,
Sam
