Are you using Windows Clustering or NLB? Usually people use the later. If you are using NLB, then you need to run your web app pool under a domain service account. You then register an SPN under that service account for the DNS name that users will use to access the NLB cluster.
Note: this changes a bit with IIS7.5, but you didn't indicate what OS you are using. www.adopenstatic.com/faq<http://www.adopenstatic.com/faq> has all the info you need to understand Kerberos and IIS and getting it all working Cheers Ken From: justino garcia [mailto:[email protected]] Sent: Saturday, 5 May 2012 1:44 AM To: NT System Admin Issues Subject: IIS webserver Cluster and SPN I have IIS web Cluster, and I am trying to configure Kerberos. I can access the site using of the on server in the cluster with no problem, but when I try to access the cluster by cluster_hostname, I get the following error "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. Internet Information Services (IIS)" Do I need to also add a SPN for the cluster such as ( Setspn -A HTTP/WebServer_CLUSTER_NAME mydomain\username ) ? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
