I'm troubleshooting some kerberos issues with Sharepoint and turned on kerberos logging. I'm getting -
A Kerberos Error Message was received:
on logon session
Server Time: 2:47:14.0000 4/20/2014 Z
Error Code: 0x1b Unknown Error
Server Realm: DOMAIN.LOCAL
Server Name: sp-search
Target Name: sp-search@DOMAIN.LOCAL
Error Data is in record data.
The ONLY place I've configured that account is on the Search Host Controller service. Does it make any sense to anyone? Why should that account need to be delegated?