Setting up Kerberos for 2013: Which comes first!

Greetz!
I would like my farm to use Kerberos authentication. In order to et up Kerberos do I need to first create the first web application, set it to use Kerberos and THEN set up Kerberos by creating the SPNs, Allowing 'Trust for Delegation', etc, etc?
Should I rely on
blksthls guide to get me going or is there another I should use?
Can I setup my web application using port 443 ONLY or do I also need port 80? Will Kerberos work on both ports?
Thank you!!
Love them all...regardless. - Buddha

Order doesn't matter. If you know the URL and the user that will be running the Application Pool, then you can pre-create the SPN (and that isn't a bad idea). Kerberos doesn't care about port #s with regards to HTTP/ SPNs, use what you need to use -- just
tcp/443 is fine.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

  • Setting bold font for nodes which are not leaf nodes

    In JTree, is it possible to set the font for nodes which are not leaf nodes. Can I do this without using custom renderer, or at the most using a DefaultTreeCellRenderer ?
    regards,
    nirvan

    In JTree, is it possible to set the font for nodes which are not leaf nodes. Can I do this without using custom renderer, or at the most using a DefaultTreeCellRenderer ?
    regards,
    nirvan

  • How can I set up Kerberos for PerformancePoint Per User Access?

    Hi,
    This is the setup I have: 3 Tier SharePoint farm with one WFE, one APP and one DB (contians Analysis Services and SQL Server 2012) servers.
    SharePoint 2013 Test\UAT (1 Server for Analysis services and Database Services)
    SharePoint Content   Databases
    UATSQLDBSERVERMachine
    PerformancePoint Unattended Service   Account
    <domain>\unattendedaccount_uat
    Performance Point Application Pool
    <domain>\sp_pps_uat
    COEREPORTS Application Pool
    <domain>\sp_apppoolcoe_uat
    Analysis server
    UATSQLDBSERVERMachine
    Analysis server COE Cubes Instance
    UATSQLDBSERVERMachine\MULTIDIMEN
    COE Databases Instance
    UATSQLDBSERVERMachine
    UATSQLDBSERVERMachine - MS SQL Server Service Account
    <domain>\sp_sql_uat
    UATSQLDBSERVERMachine - MS SQL Analysis Serv Serv   Acc (MULTIDIMEN)
    <domain>\sp_ssas_uat
    Can someone explain what settings I would need in Active Directory or Local Admin/Permissions. I need a decent explanation of how this works. Much of the answers people give for setting up Kerberos are for Single server setup or they have missed
    a heap of settings. To be honest I get the general gist of how it works, but I want to be clear so that I know if SPN settings and Delegates are correct or not.
    Can someone help out here?
    Thanks.
    John. 
     

    Some knowledge:
    - http://sbrickey.com/Tech/Blog/Post/Kerberos_Primer
    - http://sbrickey.com/Tech/Blog/Post/Kerberos_Authentication_for_SharePoint_2010
    - http://sbrickey.com/Tech/Blog/Post/SharePoint_and_the_Kerberos_Negotiate_provider
    Some tools:
    - http://spkerberosbuddy.codeplex.com/
    - http://spk.codeplex.com/
    - http://sdssharepointlibrary.codeplex.com/releases/view/92022
    Scott Brickey
    MCTS, MCPD, MCITP
    www.sbrickey.com
    Strategic Data Systems - for all your SharePoint needs

  • Which comes first?  The schema or the form?

    I am new to livecycle, so please bear with me ;-)
    My question is about schemas. Since my company does not have a "master" schema, we will be starting from scratch.
    How does one begin? Do you create a schema first in a tool such as xmlSpy and then use that to create forms and bind the data? Or does one start by creating forms and then exporting the data from livecycle out to a schema (which then would also need to be bound back to the fields in the data view). For some reason I'm stuck thinking that starting by creating the form(s) first and exporting the data would be useful for growing your master schema.
    Thanks for your help!

    Hi,
    What the Paul said is actually correct. However most of the time form is changing a lot so you have to change the schema before changing the form if starting from schema.
    If you design the document first, you can generate the schema later by using the exported data of the PDF. There exists some free tools to convert XML data to XSD schema.
    In case of any consultancy issues and huge number of PDF designs needed in small periods, we develop and design PDF documents.
    Asiye Günaydın
    Project Consultant
    KGC Consulting Co.
    http://www.kgc.com.tr

  • Upgrade 10.1.0.4 32 Bit to 10.2.0.3 64 Bit - Which comes first?

    Hello,
    We are going to be upgrading our Oracle EBS database from 10.1.0.4 32 bit Linux to 10.2.0.3 64 bit Linux. I was planning on doing the upgrade in phases (instead of doing it in one shot) like this:
    1) Upgrade database to 10.2.0.3 32 bit. Wait a few weeks to make sure everything is ok.
    2) Upgrade server/database to 64 bit.
    Is there any advantage to doing the database upgrade first (10.1.0.4 to 10.2.0.3) or the OS/Oracle database upgrade (32 bit to 64 bit)?
    Of course I will be testing all of this on a sandbox environment before trying on production.
    Thanks,
    Alfredo

    We are going to be upgrading our Oracle EBS database
    from 10.1.0.4 32 bit Linux to 10.2.0.3 64 bit Linux.
    I was planning on doing the upgrade in phases
    (instead of doing it in one shot) like this:
    1) Upgrade database to 10.2.0.3 32 bit. Wait a few
    weeks to make sure everything is ok.
    2) Upgrade server/database to 64 bit.
    Your steps looks safe !!!
    Is there any advantage to doing the database upgrade
    first (10.1.0.4 to 10.2.0.3) or the OS/Oracle database upgrade (32 bit to 64 bit)?
    Yes , upgrading 10.1.0.4 to 10.2.0.3 is safe step , so put safe step first.
    Then upgrade 32 bit to 64 Bit , In this step you might see some execution
    plan changes
    Of course I will be testing all of this on a sandbox
    environment before trying on production.
    This is mandatory step :-)
    - Virag Sharma
    http://virag.sharma.googlepages.com
    http://viragsharma.blogspot.com

  • Where do I set up rules for conflict resolution when syncing iTunes with Outlook?

    I just got an iPhone 5 and I'm coming from a Blackberry.  I've been syncing Outlook Calendar and Contacts to a portable device for over 10 years, even back in the day of the pocket pc and more recently the Blackberry.  My iPhone 5 syncs great and seemlessly with Outlook using iTunes.  I've had no issues as of yet.  The problem for me is, it just seems "too" easy.  I didn't see anywhere where I could set rules for conflict resolutions.  For example, if your pc says one thing but your iPhone says another, who wins and supercedes the other?  What if by accident your iPhone loses all of its data, then iTunes syncs with your pc - will it delete all the Outlook data on your pc because it thinks it's syncing with updated data from your iPhone?  (in my case data I've had for over 10 years) 
    With the Blackberry software it asked you to set up rules for conflict resolution when first connecting the phone (including an option to ask you first).  In my case, I chose to have it ask me whenever it discovered a conflict.  So whenever I synced, it specifically alerted me exactly how many items are being synced, and then if there were any conflicts, it'd stop and then ask me which device I want to supercede the other.  This gave me a lot of piece of mind.  Now after getting my iPhone and using iTunes to sync, it's been great so far but I have to say that I don't have as much piece of mind.  Does anyone have any feedback on how to set up conflict resolution with iTunes and Outlook or does it not exist at all?  Again, what would happen if there was a conflict between the two devices? 

    Yes! Thankyou for that. I had of course put the context.xml file in the web-inf directory.
    I followed your example to the letter and it still wouldn't work. Or rather, I followed to the letter expect for the difference between "WEB" and "META".
    Once I worked that out, it started working like a dream.
    Note to anyone else who has a similar problem, make sure you REALLY look at the answer given. Make sure you REALLY do have all the files in the suggested places. It will save you time.
    Thanks again.

  • Setting background image for repeating frame in .pdf report

    Is it possible to set a background image for a repeating frame, and more specifically for a repeating frame rendered in .pdf?
    I do not see any standard property in the navigator for images of any sort and the documentation touches only on setting background images for graphs, which is not the intent in my case. I -did- add an HTML table property background="myimage.jpg" but the report is ultimately generated in .pdf format and I was not surprised to see that the image was not rendered.
    Does anyone know if setting a background image as described is even possible, and if so, how? A second but less optimum solution would be setting the image as the background for all report pages, again in .pdf.
    Many thanks.

    Hi Raj,
    Yes you can have an image in the background. Thats possible if you are using XML forms as an iview or ivew dev in WebDynpro...
    Also check this [link|regarding background color change in iview]
    Regards,
    Piyush
    Reward points if this helps!!!

  • How can I set the color for a textfield

    Hi all,
    I use a textfield and I want to set the color for characters which are typed in the textfield. I didn't find anywhere a solution for this. Do you know how I should implement this?
    Thanks

    Not possible. If you want this, you'll need to make a custonItem that implements this.

  • I have set reminders of birthdays for 2013 opting for yeARly reminders however only three of them are showing for 2014 and rest are missing can someone help, while i called up customer support they asked me to reset the phone which as well didn't help

    I have set reminders of birthdays for 2013 opting for yeARly reminders however only three of them are showing for 2014 and rest are missing can someone help, while i called up customer support they asked me to reset the phone which as well didn't help

    Tina,
    I would go crazy if this was me.  You may find this interesting from the customer agreement (to see full agreement go here:Customer Agreement | Verizon Wireless):
    "HOW AND WHEN CAN I DISPUTE CHARGES?
    If you're a Postpay customer, you can dispute your bill within 180 days of receiving it, but unless otherwise provided by law or unless you're disputing charges because your wireless device was lost or stolen, you still have to pay all charges until the dispute is resolved. If you're a Prepaid customer, you can dispute a charge within 180 days of the date the disputed charge was incurred. YOU MAY CALL US TO DISPUTE CHARGES ON YOUR BILL OR ANY SERVICE(S) FOR WHICH YOU WERE BILLED, BUT IF YOU WISH TO PRESERVE YOUR RIGHT TO BRING AN ARBITRATION OR SMALL CLAIMS CASE REGARDING SUCH DISPUTE, YOU MUST WRITE TO US AT THE CUSTOMER SERVICE ADDRESS ON YOUR BILL, OR SEND US A COMPLETED NOTICE OF DISPUTE FORM (AVAILABLE AT VERIZONWIRELESS.COM), WITHIN THE 180–DAY PERIOD MENTIONED ABOVE. IF YOU DO NOT NOTIFY US IN WRITING OF SUCH DISPUTE WITHIN THE 180-DAY PERIOD, YOU WILL HAVE WAIVED YOUR RIGHT TO DISPUTE THE BILL OR SUCH SERVICE(S) AND TO BRING AN ARBITRATION OR SMALL CLAIMS CASE REGARDING ANY SUCH DISPUTE."
    This may help you also: Arbitration and Mediation FAQs | Verizon Wireless
    You can dispute any charges by doing an Arbitration or Mediation.  I have never done it, so I can not help much there but this all may get you started.
    Let me know if any of this works! Good Luck! Please keep me updated. I really hope they help you.

  • HT4759 i downloaded the icloud to my pc it says to login with apple id and it says it is a valid apple id but not cloud but i cannot get the control panel for icloud to come up to set it up on my pc which runs windows 8

    i downloaded the icloud to my pc it says to login with apple id and it says it is a valid apple id but not cloud but i cannot get the control panel for icloud to come up to set it up on my pc which runs windows 8

    An update.
    From iCloud Control Panel 2.1.1 for Windows
    "iCloud Control Panel 2.1 and later includes support for Windows 8"
    but you still need to set it up on a Mac or iOS device, "Note: To create an iCloud account you need an iPhone, iPad, or iPod touch with iOS 5 or later, or a Mac with OS X Lion v10.7.5 or later."

  • HT201328 I have been given permission for unlocking my iphone 3 GS from Orange. I want to set up the phone for my wife to use with a new number and carrier. Do I unlock under my itunes account first or set one up for her and then unlock the phone.

    I have been given permission for unlocking my iphone 3 GS from Orange. I want to set up the phone for my wife to use with a new number and carrier. Do I unlock under my itunes account first ( I now have a new iphone on this account) or set one up for her and then unlock the phone. I am worried about upsetting the new phone.

    I would complete unlocking as is and then
    restore as new once you know the iPhone is unlocked
    Be aware Orange will process the request at their speed
    one of the reasons they usually reside at bottom of User Sat surveys
    will likely take weeks
    This may also help
    http://support.apple.com/kb/HT5014

  • Purchased a new Apple TV and the remote double clicks each time I press the button. It worked fine during set up and for the first two days.  I have since moved it and this problem started. Restarted,reset,unplugged,change remotes, no change.Help please.

    Purchased a new Apple TV and the remote double clicks each time I press the button. It worked fine during set up and for the first two days.  I have since moved it and this problem started. Restarted,reset,unplugged,changed remotes, no change. Latest software update. This is really annoying.  iPhone remote app works just fine.  Any suggestions?

    That's one of the weird things.. it recognizes it maybe 10% of the time. And usually, only after I do the two-button reset. Problem is.. since it won't charge above 2%, anytime I try to do a restore or anything like that using iTunes, my device shuts off and I lose whatever progress I'd made.
    So, an update... after reading through a bunch of similar complaints (there are literally 1000's of them so there's NO WAY this isn't somehow ios7 related, thanks a lot APPLE ) I decided to try a restore in recovery mode. After 3 hours and several disconnections... I ended up having to just set it up as a new iPad, as the restore did nothing. Weirdly though... as I was doing the restore in recovery mode.. I noticed I'd gotten up to a 10% charge.. higher than it's been since September, so after setting it up as a new device, I turned it off and plugged it in using the wall charger. 2 hours later and I was up to 38%. Still not great, as my iPad, before ios7 could've fully charged twice in the amount of time it took for me to now get 28% more of a charge. And that's with a fully cleaned out device.. so that really ***** and I'm now more confused than ever.
    But I'm gonna leave it overnight charging and see what I come up with tomorrow. Sadly, when I paid $600 for it in February, I never expected to have to play "wait and see" with it...

  • I was setting up my Airport and thought the first set up did not go through, so I set up again and I ended up with two accounts instead of one.  How can I manage to have only one account now? Thanks for the help.

    I was setting up my Airport and thought the first set up dod not go through, then I set up again and ended up with two wireless accounts.  I use it for the prointer and the iPad, and I can see both accounts in the iPad.  How do I get rid of one account?  Thanks for the help!

    me.com accounts can be used for iCloud.  See the FAQ section in:
    <http://support.apple.com/kb/ht4895>
    but it may be too late if you have already created a new AppleID.
    A few years ago Apple said they were working on allowing account merging, but it never happened (maybe objections from copyright holders).

  • Hello  I bought my wife a new MacBook Pro, in setting it up for her, I took her Time Machine external drive to migrate onto the new machine but her old MBP not only was on 10.6, it was my old machine which I was still Administrator for.  i plugged in the

    Hello
    I bought my wife a new MacBook Pro, in setting it up for her, I took her Time Machine external drive to migrate onto the new machine but her old MBP not only was on 10.6, it was my old machine which I was still Administrator for.
    i plugged in the external drive to start the migration process after entering her name and username from the old machine which gave me the options on transferring the old data over.
    I also unchecked the Administrative end that had my info hoping that ONLY her data, files, etc., would be the ones sent over to her new machine which I wanted her to be the ONLY Administrator for. All went like clockwork until the restart.
    Normally the screen should show the username and only need the password but both entries were blank, as in ‘Other’ sign in option available only. I entered her name and password, nothing….used her username and password, nothing. Used my old Administrator name and password, NOTHING!
    I tried defaulting to factory settings from the Restore feature but it directs me to notify Apple. I tried in Terminal to change the password, nothing. I tried to boot from MY external drive and it doesn’t recognize it. I tried to even use my external drive which actually has the Mavericks upgrade, nothing!
    Basically I can only get the startup screen which isn’t accepting the username/password or the Restore feature which doesn’t offer any options helpful!
    Please, how do I start from scratch and start over here? Or simply change the Administrator name and password so I can proceed with everything thats already on there? I wish I could even boot from another drive but no luck on anything!

    First, on the old machine, make your wife's account an admin one. Log into it and delete yours. Then, update the TM backup. Finally, use Internet recovery mode, ⌘⌥R, erase the HD, and restore the OS. One first boot, follow the steps outlined in Pondini's Setup New Mac guide.

  • How do you set the duration for multiple stills in iMovie 2013?

    How do you set the duration for multiple stills in iMovie 2013?
    Before upgrading to the latest version of iMovie last month, I was able to set the duation of all of the stills included in an iMovie project at one time by clicking the apply to all still box in the adjustment pop up. That option is no longer apparent. If it is available I cannot find it, and I have tried several different ways to accomplish it. I have tried the iMovie help section and can find nothing to help.
    Apple, do I really have to adjust close to 500 pictures to a 5 second duration individually???
    REALLY??!!

    ...why wouldnt people want that level of accuracy when animating, especially when working to music at a specific duration?
    Because often people are animating to words or beats in the music.  Music is rarely performed with a computer-precise beat and tempo.  Musicians aren't robots: they swing the beat sometimes.  They use rubato.  They change tempo.  They change time signatures.  As a result, you have to FIND those words and beats.  It's not a situation where you can say, "There!  I've found the duration of one beat!  Now it's easy to find the rest of them!" 
    If you try it, you will be very disappointed.
    Try finding the precise end of a piece of music that fades or ends on a big chord with a ring-out.  You'll see that it's trial-and-error: what's the point where it becomes inaudible?  It depends on how high your speakers are turned up.  You might have them way up, you set an end point for the layer, and then you do a RAM Preview at a more reasonable volume.  You might say, "Hey!  The music ends before the layer ends!"...  but you KNOW you set the layer's out point when the audio file goes silent.
    AE has layer markers that can be used on an audio layer to mark beats, words, etc. They come in very handy.
    I guess it comes down to this: because AE can do so much different stuff, there are very few automated procedures.  Oh, Adobe tries with effects that convert audio levels to keyframes, but they're not 100% reliable... especially on something like a capella choral works.  For true accuracy, you need  find the timings yourself. 
    If you want something simpler, try a different application. But be prepared for lower level of accuracy.

Maybe you are looking for

  • Unable to change Date Created in Metadata

    Please help with my first post... Unable to change Date Created field in Metadata. I am a newspaper photographer sending .jpg pics with captions to my office from my iMac. They are viewed at the office on Windows PCs using SCC MediaGrid. When changin

  • IOS6...exchange email account problems....iPad

    I just installed iOS6 on my iPhone 4 and "new iPad"....had a lot of issues with icloud but seemed to have resolved those issues. However, my exchange email and hotmail live account will not sync on my iPad. The iPhone appears to have adapted well, bu

  • Itunes dll errors, APPLE SYNC error on bootup, sync error.....solution!

    One brilliant guy came up with this solution in this forum and has worked on 5 straight PC's. The thing is, I found another thread that helped also. In addition to this, if you are getting the Apple Sync Error, or still have problems after doing this

  • Backup to file system and sbt_tape at the same time?

    hello! is it possible to do a rman backup to disk and sbt_tape at the same time (just one backup, not two)? the reason is, that i want to copy the rman backup files from the local file system via robocopy to another server (in a different building),

  • Meter's scale color

    Hi anyone who can programtically change the property of the meter, Scale.MarkerVals?  I could not find ways to pass the values to control the colour range properly..  I have attached it for you. That's how it works. After the colour ranges for the me