SOLVED

Constrained Delegation missing SPNs

Occasional Contributor

Hi,

i have a setup like this
DFL/FFL: 2012R2
OS:2012R2

1 Reportserver Servicaccount dom\sa-rs

2 Database Servers Servicaccount dom\sa-sql

 

setspn -l sa-sql

MSSQLSvc/sql2:1433
MSSQLSvc/sql2.dom.domain:1433
MSSQLSvc/sql1.dom.domain
MSSQLSvc/sql1.dom.domain:1433
MSSQLSvc/sql2.dom.domain
MSSQLSvc/sql1:1433

when i want to configure constrained delegation in the delegationtab of sa-rs i only see:
sql1.dom.domain:1433

sql1.dom.domain

sql2.dom.domain
sql2:1433

2 are missing. but as described i can see them wiht setsp -l and also if i check the sa-sql in adsiedit i see all 6 of them....

any ideas why?

 

1 Reply
best response confirmed by PeDe (Occasional Contributor)
Solution

PeDe_0-1627386491594.png

Didn´t click "Expanded" :facepalm:
Sry