Forum Discussion

PeDe's avatar
PeDe
Brass Contributor
Jul 26, 2021

Constrained Delegation missing SPNs

Hi,

i have a setup like this
DFL/FFL: 2012R2
OS:2012R2

1 Reportserver Servicaccount dom\sa-rs

2 Database Servers Servicaccount dom\sa-sql

 

setspn -l sa-sql

MSSQLSvc/sql2:1433
MSSQLSvc/sql2.dom.domain:1433
MSSQLSvc/sql1.dom.domain
MSSQLSvc/sql1.dom.domain:1433
MSSQLSvc/sql2.dom.domain
MSSQLSvc/sql1:1433

when i want to configure constrained delegation in the delegationtab of sa-rs i only see:
sql1.dom.domain:1433

sql1.dom.domain

sql2.dom.domain
sql2:1433

2 are missing. but as described i can see them wiht setsp -l and also if i check the sa-sql in adsiedit i see all 6 of them....

any ideas why?

 

  • PeDe's avatar
    PeDe
    Brass Contributor

    Didn´t click "Expanded" :facepalm:
    Sry

Resources