Cannot set SPN with Kerberos on BOXI cluster

server administration XI Server Discussion
1

I currently have an Issue with Set SPN command, using SSO AD with Kerberos:

My environment is:

  • IE 11
  • Apache Tomcat
  • Win Server 2012 R2 Standard
  • SQL Server 2012.0.5000
  • Windows Service account to be used:svc-borptxi

I enter:

setspn -S BOBJCentralMS/svc-borptxi.<mydomain.uk> svc-borptxi

I receive this response:

Microsoft Windows [Version 6.1.7601]

Unknown parameter BOBJCentralMS/svc-borptxi.<mydomain.uk>

Please check your usage.

EXISTING SYSTEM WORKS FINE ON OLD WIN 2K SERVER WITH THIS COMMAND (WIN 2003)

setspn -A BOBJCentralMS/DEV8SVR.<mydomain.uk> svc-borpt

ISSUES/QUESTIONS

  1. Is the above syntax incorrect?

  2. What defines the first value after -S (in the case above, “BOBJCentralMS”). Can it be anything or does it have to be a value that equates to something specific?

  3. I found a doc saying that setspn -A is an old value and that with the O/S we are using we should now use setspn -S. Is this a common
    understanding?

  4. In the ‘Set spn’ statement on Win 2003 I notice that DEV8SVR was used. Should it be the same in Win Server 2012 R2 Standard

BO_Beast :uk: (BOB member since 2004-10-11)