Forum Discussion
PeDe
Jul 26, 2021Brass Contributor
Constrained Delegation missing SPNs
Hi,
i have a setup like this
DFL/FFL: 2012R2
OS:2012R2
1 Reportserver Servicaccount dom\sa-rs
2 Database Servers Servicaccount dom\sa-sql
setspn -l sa-sql
MSSQLSvc/sql2:1433
MSSQLSvc/sql2.dom.domain:1433
MSSQLSvc/sql1.dom.domain
MSSQLSvc/sql1.dom.domain:1433
MSSQLSvc/sql2.dom.domain
MSSQLSvc/sql1:1433
when i want to configure constrained delegation in the delegationtab of sa-rs i only see:
sql1.dom.domain:1433
sql1.dom.domain
sql2.dom.domain
sql2:1433
2 are missing. but as described i can see them wiht setsp -l and also if i check the sa-sql in adsiedit i see all 6 of them....
any ideas why?
Didn´t click "Expanded"
Sry
- PeDeBrass Contributor
Didn´t click "Expanded"
Sry