Troubleshooting Tools
The following tools will be helpful when preparing to configure Kerberos and for troubleshooting any possible errors.
| Tool | Description |
|---|---|
|
netstat –a –n -p tcp |
Used to locate available TCP ports. From the command prompt, type the following command to return a list of TCP ports that are being used |
|
ADSI Edit |
Create your own query to look for instances of duplicate SPNs Note: SETSPN has a few new query options that will help you troubleshoot duplicate spns |
| Delegconfig | Delegation test web application. It can be downloaded here: http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1434 |
Reference material
 |
The references below direct the reader to online blogs or articles that may be of use. |
SharePoint + Kerberos on Windows Server 2008 (IIS 7) : http://sharepointspot.blogspot.com/2008/12/sharepoint-kerberos-on-windows-2008.html
IIS 7 and Kernel mode authentication : http://blogs.msdn.com/sudeepg/archive/2009/02/08/iis-7-kernel-mode-authentication.aspx
Changes Between IIS 6.0 and IIS 7.0 Security :http://learn.iis.net/page.aspx/110/changes-between-iis6-and-iis7-security/
IIS 7.0: Configuring Authentication in IIS 7.0 :http://technet.microsoft.com/en-us/library/cc733010(WS.10).aspx
