I am trying to get kerberos working so that my web application can pass the users credentials to the database. This is actually for SharePoint, but I am doing it on a normal web application first.
I set the app pool account for the application to be a network account that was created for it. lets say domain\testaccount.
with the website http://www.test.com and the server kerbtest.domain.com.
I ran the set spn command.
setspn -a HTTP/kerbtest.domain.com domain\testaccount
setspn -a HTTP/www.test.com domain\testaccount
I went into the AD server set delegation to be allowed for the server and the service account. I also made sure that "account is sensitive and cannot be delegated" is turned off.
The connection string I am using is "Integrated Security=SSPI;Data Source=kerbtest;Initial Catalog=test;Trust ...
Go to the complete details ...