How did you set up DNS? Does the cluster have an A record or a CNAME at the moment?
If DNS is in order, you most likely have an issue with kernel mode authentication, which essentially means the machine's account, not the custom domain account, is trying (and failing) to decrypt the ticket. This is a new default behavior with IIS7. Read the section "Kerberos authentication and Kernel Mode Authentication" here: http://technet.microsoft.com/en-us/library/gg502606.aspx --Steve On Fri, May 4, 2012 at 1:43 PM, justino garcia <[email protected]> wrote: > I have IIS web Cluster, and I am trying to configure Kerberos. > I can access the site using of the on server in the cluster with no problem, > but when I try to access the cluster by cluster_hostname, I get the > following error > "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid > credentials. > Internet Information Services (IIS)" Do I need to also add a SPN for the > cluster such as ( Setspn –A HTTP/WebServer_CLUSTER_NAME mydomain\username ) > ? > > > > Thanks, > > Justino > > > -- > Justin > IT-TECH ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
