Kerberos - the beast of SharePoint - has been configured and is creating tickets on my test environment WFE. I also had RevertToSelf for the BCS service application turned on. I am able to create an external content type/external list with the Authentication Mode turned to "User's Identity." But when I attempt to access the list I get the dreaded "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'." The WFE event viewer is showing my domain account with Kerberos. The App Server is showing Negotiate.
Is there another setting I am overlooking in Central Admin/IIS? Is the difference in the WFE/App server for tickets an issue? Why the heck does Kerberos have to be that difficult? OK - maybe not so much that last question, but help getting BCS authentication working would be very appreciated!