Kerberos implementation?

Sep 13, 2011 at 9:01 PM

Any plans on incorporating Kerberos into the scripts?

 

 

btw, love love love the scripts!

Coordinator
Sep 14, 2011 at 1:54 AM

Have thought about it, but no...

Reasons:

  1. It's way too easy to just convert/extend a web app to Kerberos after the fact (and after you've set up the SPNs, DNS A records etc.) using Central Admin.
  2. For setting up SPNs (the trickiest part), I couldn't assume that the setup user had Domain Admin and/or rights to set up SPNs. In fact, they shouldn't...
  3. This discussion board would get flooded with Kerberos questions, issues etc. from folks who just set the flag to "true" expecting miracles :)

Cheers man & thanks again for the love...

Brian