RE: setspn persistence

2010-07-30 Thread Brian Desmond
--Original Message- From: Phillip Partipilo [mailto:p...@psnet.com] Sent: Monday, July 26, 2010 2:31 PM To: NT System Admin Issues Subject: setspn persistence I'm decommissioning some servers, and to ease the transition, since we have some old code that is hardcoded with old server names, I&

RE: setspn persistence

2010-07-26 Thread greg.sweers
M To: NT System Admin Issues Subject: Re: setspn persistence Your machine wouldn't happen to be a domain controller, would it? See the last 4 comments to a very interesting article. http://blogs.technet.com/b/askds/archive/2008/05/29/kerberos-authentication-problems-service-principal-name-sp

Re: setspn persistence

2010-07-26 Thread Richard Stovall
Your machine wouldn't happen to be a domain controller, would it? See the last 4 comments to a very interesting article. http://blogs.technet.com/b/askds/archive/2008/05/29/kerberos-authentication-problems-service-principal-name-spn-issues-part-1.aspx On Mon, Jul 26, 2010 at 3:31 PM, Phillip Par

Re: setspn persistence

2010-07-26 Thread Richard Stovall
Perhaps I should note that I was only moving file shares and no Kerberized services. On Mon, Jul 26, 2010 at 4:08 PM, Richard Stovall wrote: > What OS? I had to do this about a year ago on a 2003 Server and I did not > have to use the setspn tool that I recall. I did have to create a string >

Re: setspn persistence

2010-07-26 Thread Richard Stovall
What OS? I had to do this about a year ago on a 2003 Server and I did not have to use the setspn tool that I recall. I did have to create a string value at HKLM\System\CurrentControlSet\Services\lanmanserver\parameters called OptionalNames, and put the secondary names there (each on its own line)

Re: setspn persistence

2010-07-26 Thread Joseph Heaton
I take it that it would be too difficult to have your developers go back and do away with the hardcoded names? >>> Phillip Partipilo 7/26/2010 12:31 PM >>> I'm decommissioning some servers, and to ease the transition, since we have some old code that is hardcoded with old server names, I'm goin

setspn persistence

2010-07-26 Thread Phillip Partipilo
I'm decommissioning some servers, and to ease the transition, since we have some old code that is hardcoded with old server names, I'm going through the motions of setting up CNAME DNS records to point any queries to the old server to the new server, set up the key in HKLM\System\CurrentControl