2

We have Configured the SharePoint 2013 with NTLM authentication. After few months our security team requests us to change the current authentication method from NTML to Kerberos in SP2013 hosted web apps, because of this news

Could you please advice us the steps and impact of changing the authentication?

1

It is easy to configure but little tricky.

  • You have to create the SPN for the web application url (Short & FQDN).

    setSPN –S HTTP/PORTAL DOMAIN\PortalAppPool setSPN –S HTTP/PORTAL.DOMAIN.COM DOMAIN\PortalAppPool

  • You have to delegate trust.

  • You have to Create the DNS for SQL service account and Enable kerbros

  • Change the Web application's authentication settings from NTLM to Kerbros.

  • Now you have to test the configuration. You can check it via Security Event Log or run the Klist in command prompt to see the Kerb ticket.

Check these guide for complete understanding

The first Kerberos guide for SharePoint 2013

Configure Kerberos authentication (Office SharePoint Server)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.