No Access to the Central Administration anymore!!!
Hello,
Trying to make SSRS available on SharePoint I pass the following commands:
SharePoint Site:
Setspn a http://teams.domain ad\ad\svcSPTeamApPool
Setspn a http://teams ad\ad\svcSPTeamApPool
Central Administrator:
Setspn a http://ap1:3323/default.aspx ad\ad\svcSPTeamApPool
setspn a http://ap1.domain:3323/default.aspx ad\ad\svcSPTeamApPool
Reporting Services:
Setspn a http/ap1/ITOSMMT ad\svcitosmmt
Setspn a http/ap1.domain/ITOSMMT ad\itosmmt
SQL Server:
Setspn a MSSQLsvc/SQLA:1433 ad\itosmmt
Setspn a MSSQLsvc/SQLA.domain:1433 ad\itosmmt
but now I could not access the SharePoint Central Administration page "
Not Authorized
HTTP Error 401. The requested resource requires user authentication.
Is it one the command which broke my access ?
I have still access through IIS locally on the server!!!
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
March 27th, 2012 12:19pm
Hello,
Trying to make SSRS available on SharePoint I pass the following commands:
SharePoint Site:
Setspn a http://teams.domain ad\ad\svcSPTeamApPool
Setspn a http://teams ad\ad\svcSPTeamApPool
Central Administrator:
Setspn a http://ap1:3323/default.aspx ad\ad\svcSPTeamApPool
setspn a http://ap1.domain:3323/default.aspx ad\ad\svcSPTeamApPool
I think your syntax is wrong. And why do you type in the ad\ domain twice before the service account?
I would think it should look like:
Setspn -a HTTP/teams ad\svcSPTeamApPool
Setspn -a HTTP/teams.domainname ad\svcSPTeamApPool
Setspn -a HTTP/ap1:3323 ad\svcSPTeamApPool
Setspn -a HTTP/ap1.domainname:3323 ad\svcSPTeamApPool
Free Windows Admin Tool Kit Click here and download it now
March 27th, 2012 3:09pm
Yes I noticed when typing I was having double "ad", I typed with only one "ad" but still the same issue.
IISRESET
REBOOTING the server
nothing chnaged...
Thanks,
DOmSystem Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
March 27th, 2012 3:17pm
Did you go into AD and enable the service accounts to be trusted for delegation? Is svcSPTeamApPool the service account that the Central Administration application pool runs under?
Free Windows Admin Tool Kit Click here and download it now
March 27th, 2012 3:30pm
Hello,
svcITOSMMT is the service running the SSRS. No delegation.
No, SharePoint Central Administrationv3 Application Pool is running under svcspadm. No delegation.
svcSPTeamApPool is running WSSTeamAppPool. No delegation.
As my reports are under:
http://teams.mednet.ucla.edu/sites/ITOSMMT/Reports/Forms/AllItems.aspx
should I run another SETSPN ?
SETSPN -a http://teams.mednet.ucla.edu/sites/ITOSMMT/Reports/ ad\svcspadm
or
SETSPN -a http://teams.mednet.ucla.edu/sites/ITOSMMT/ ad\svcspadm
or
SETSPN -a http://teams.mednet.ucla.edu/ ad\svcspadm
should I add the delegation?
Any service to retart after these changes?
How to cancel the "setspn" previously" passed if they were wrong? setspn -r hostname (server name ? account name?)
how to identify the couple service count/site to remove and not removing all others?
C:\Users\dominiqued>setspn -l svcspteamappool
Registered ServicePrincipalNames for CN=svcSPTeamApPool,OU=Service Accounts,DC=a
d,DC=domain:
http/mbspap1
http/mbspap1.ad.domain http/teams.ad.domain
http/teams
http://teams
http://teams.domain
C:\Users\dominiqued>setspn -l svcitosmmt
Registered ServicePrincipalNames for CN=svcITOSMMT SS. svcITOSMMT,OU=Service Acc
ounts,DC=ad,DC=domain:
http/teams
http/teams.ad.domain
http/mbspap1.ad.domain
http/mbspap1
http/mbspap1.ad.domain/ITOSMMT
http/mbspap1/ITOSMMT
MSSQLsvc/MBSQLSPCLA.ad.domain:1433
MSSQLsvc/MBSQLSPCLA:1433
Any impact on the SharePoint Central Administration Console?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
March 27th, 2012 5:21pm
Hello,
Trying to find the service account to be used in the setspn... and also how to write the web site to be used in the command as well...
Is it at the site level? web appalication level? collection level?
Thanks,
DomSystem Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
Free Windows Admin Tool Kit Click here and download it now
March 28th, 2012 8:13pm
?bump?System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
March 31st, 2012 1:36am
? bump ?System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
Free Windows Admin Tool Kit Click here and download it now
April 2nd, 2012 12:12pm
Any news?
Thanks,
DOm
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
April 4th, 2012 3:41pm
Still reviewingSystem Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager
Free Windows Admin Tool Kit Click here and download it now
May 2nd, 2012 9:40am


