How to K2 Kerberos edition

Hello all,

Well its been some time since I have posted anything up here but this video is a long one, but also very important.  IT IS KERBEROS.  Since this one is so long and covers so much I added an index/TOC to it, Simply open the HTML file associated with this project in the ZIP.  If you do not want to use this you can just watch the straight WMV.

One item that I did not explain very well was the Kerberos Time Sensitivity.  By default if there is greater than 5Min difference between 2 systems involved in a authentication Kerberos will fail.  Check out the following article for more info.

http://technet.microsoft.com/en-us/library/cc780011.aspx

for advanced information on Constrained Delegation and Protocol Transition check out the following link

http://technet.microsoft.com/en-us/library/cc739587.aspx

For wireshark info

http://www.wireshark.org/

The SETSPN tool is in the 2003 support tools downloadable from here

http://www.microsoft.com/downloads/details.aspx?FamilyID=96a35011-fd83-419d-939b-9a772ea2df90&DisplayLang=en

and finally the video

Here is the Link to the zip download

http://k2underground.com/files/folders/howtok2/entry27136.aspx

After you watch the video Here are some great resources.

http://blogs.msdn.com/james_world/archive/2007/08/20/essential-guide-to-kerberos-in-sharepoint.aspx

http://www.pluralsight.com/wiki/default.aspx/Keith.GuideBook.HomePage

http://blogs.msdn.com/martinkearn/archive/2007/04/23/configuring-kerberos-for-sharepoint-2007-part-1-base-configuration-for-sharepoint.aspx

http://www.digwin.com/view/moss-and-kerberos-configuration

http://www.microsoft.com/msj/0899/kerberos/kerberos.aspx

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

http://windowsitpro.com/article/articleid/97376/use-kerberos-to-secure-moss-2007.html

http://www.sharepointblogs.com/spfromscratch/archive/2008/02/11/configuring-kerberos-autentication-on-moss-2007.aspx

http://technet2.microsoft.com/windowsserver/en/technologies/featured/kerberos/default.mspx

http://blogs.inetium.com/blogs/jdevries/archive/2006/04/21/more-on-kerberos-and-delegation-troubleshooting.aspx

http://support.microsoft.com/kb/907272

http://www.microsoft.com/downloads/details.aspx?FamilyID=99B0F94F-E28A-4726-BFFE-2F64AE2F59A2&displaylang=en

A Great book

http://www.amazon.com/Windows-Server-2003-Security-Infrastructures/dp/1555582834/ref=sr_1_14?ie=UTF8&s=books&qid=1213632286&sr=8-14


Posted Thu, Nov 6 2008 2:32 PM by chrisg

Comments

pblose wrote re: How to K2 Kerberos edition
on Tue, Feb 3 2009 6:14

Highly recommended!  Even though I had rather extensive experience troubleshooting kerberos configuration this video still gave me additional (and simpler) ways to determine what is going wrong.  Thanks!

loveric wrote re: How to K2 Kerberos edition
on Thu, Apr 23 2009 11:19 PM

Thanks~