Forum Discussion
dp_119903
Cirrostratus
CirrostratusNon local kerberos realm
I have kerberos for server-side (SSO) working just fine.
My kerberos sso config looks like this:
username source: session.sso.token.last.username
username realm source: session.logon.last.domain...
Kevin_Stewart
Employee
EmployeeYou're getting a server principal unknown error and using **http/%h@DOMAIN1.DOMAIN.COM ** as the SPN pattern. This pattern implies that you're deriving the target SPN from the client's Host header. Is that what you intended?
