Welcome to ISAserver.org

Service Principal Name

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> Service Principal Name

Page: [1]

Message

<< Older Topic Newer Topic >>

Service Principal Name - 1.Mar.2010 12:55:46 PM

bfrank55

Posts: 3
Joined: 5.Oct.2009
Status: offline

In our test environment we have created a separate rule to publish RPC over HTTP using Kerberos Constrained Delegation. In test we have only one Exchange 2007 CAS server so our Service Principal Name = http/extestcas.domain.name and everything works just fine. As we prepare for production, we will be using 3 CAS servers that are set up in ISA as a server farm. My question is: What do we use for the Service Principal Name in the KCD rule and what is the correct syntax?

Post #: 1

Featured Links*

RE: Service Principal Name - 14.Apr.2010 1:08:50 PM

preeves

Posts: 33
Joined: 2.Dec.2004
Status: offline

http/*

(in reply to bfrank55)

Post #: 2

RE: Service Principal Name - 23.Apr.2010 11:05:53 AM

andreasy

Posts: 25
Joined: 15.Mar.2010
Status: offline

quote:

ORIGINAL: preeves

http/*

What if you have only 1 Exchange server? I use the internal FQDN of my mailserver as it is shown in AD.

(in reply to preeves)

Post #: 3

RE: Service Principal Name - 23.Apr.2010 6:37:09 PM

Jason Jones

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

If you are using a web farm the '*' in http/* gets replaced with the actual server name of the farm member being used. If you are not using a web farm, you can include the server name in the SPN definition like http/servername.internal-domain.com

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to andreasy)

Post #: 4