zettelkasten/OneNoteExport/Kommunikationstechnologie/Sharepoint/Infrastruktur/12_Kerberos.md
Ralf Koop 5a108aa2b4 .
2023-08-25 23:29:11 +02:00

108 lines
2.2 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

Kerberos
Freitag, 14. Dezember 2018
11:47
 
**Kerberos :**
 
setspn -s http/portal-spt.bkk-mobiloil.de bkk-mobiloil\\svc-sptWebAppU
setspn -s http/portal-spt bkk-mobiloil\\svc-sptWebAppU
Setspn -S http/mysites-spt.bkk-mobiloil.de bkk-mobiloil\\svc-sptMysiteU
Setspn -S http/mysites-spt bkk-mobiloil\\svc-sptMysiteU
Setspn -S http/search-spt.bkk-mobiloil.de bkk-mobiloil\\svc-sptSearch
Setspn -S http/search-spt bkk-mobiloil\\svc-sptSearch
 
setspn -s http/kerbportal-spt.bkk-mobiloil.de bkk-mobiloil\\svc-sptWebAppU
setspn -s http/kerbportal-spt bkk-mobiloil\\svc-sptWebAppU
Setspn -S http/kerbmysites-spt.bkk-mobiloil.de bkk-mobiloil\\svc-sptMysiteU
Setspn -S http/kerbmysites-spt bkk-mobiloil\\svc-sptMysiteU
Setspn -S http/kerbmobilnet-spt.bkk-mobiloil.de bkk-mobiloil\\svc-sptWebAppU
Setspn -S http/kerbmobilnet-spt bkk-mobiloil\\svc-sptWebAppU
Setspn -s \"http/wizdom-spt.bkk-mobiloil.de\" bkk-mobiloil\\svc-sptWizdom
Setspn -s \"http/wizdom-spt\" bkk-mobiloil\\svc-sptWizdom
setspn -s http/kerbteam-spt bkk-mobiloil\\svc-sptWebAppU
setspn -s http/team-spt bkk-mobiloil\\svc-sptWebAppU
setspn -s http/kerbworkplace-spt bkk-mobiloil\\svc-sptWebAppU
setspn -s http/workplace-spt bkk-mobiloil\\svc-sptWebAppU
 
 
 
delegierung für den ApppoolUser
Eingerichtet für svc-sptWebAppU, svc-sptMysiteU und svc-sptSearch
Kerberos Logging enable / einschalten: muss in der SPT noch gemacht werden
 
<https://support.microsoft.com/en-us/help/262177/how-to-enable-kerberos-event-logging>
 
C:\\WINDOWS\\system32\>setspn -q http/\*-spt.bkk-mobiloil.de
Die Domäne \"DC=bkk-mobiloil,DC=de\" wird überprüft.
CN=svc-SptWebAppU\\,,OU=ServiceAccounts,OU=MO,DC=bkk-mobiloil,DC=de
http/mobilnet-spt.bkk-mobiloil.de
http/mobilnet-spt
http/kerbmobilnet-spt
http/kerbmobilnet-spt.bkk-mobiloil.de
http/kerbportal-spt
http/kerbportal-spt.bkk-mobiloil.de
http/portal-spt
http/portal-spt.bkk-mobiloil.de
CN=svc-SptMysiteU\\,,OU=ServiceAccounts,OU=MO,DC=bkk-mobiloil,DC=de
http/kerbmysites-spt
http/kerbmysites-spt.bkk-mobiloil.de
http/mysites-spt
http/mysites-spt.bkk-mobiloil.de
CN=svc-SptSearch\\,,OU=ServiceAccounts,OU=MO,DC=bkk-mobiloil,DC=de
http/search-spt
http/search-spt.bkk-mobiloil.de
Bestehender SPN wurde gefunden.