The last post “Kerberos SPN Generation Setup Tool – Documentation, Instructions” gave a review of where to find help basically in the form of “Online Documentation” and the “Instructions tab”. This is a continuation of the series of blog posts “Kerberos SPN Generation Setup Tool” that describe how to use the Kerberos SPN Generation Setup Tool Beta for Kerberos Constrained Delegation with Microsoft BI tools. This post covers the first Input section tab – the “Common tab”. You can download the Kerberos SPN Generation Setup Tool Beta at FUTURESULTS, LLC.
- SSRS 2005
- SSRS 2008
- SSAS 2008
- MOSS 2007
- Additional Accounts
This tab’s information is required to use the tool.
Required Fields (denoted by the color of the input fields)
- NetBIOS Domain Name
- Fully Qualified Domain Name
- Path to SetSPN.exe on the Domain Controller
The tool was made so that the input part could be done while not logged into the domain. If you are logged in however, there is a utility link on this tab that can gather the domain information and fill in the NetBIOS and FQDN for you. Hey why type it in when you can hit a link!
If you don’t know this information, you can find it on your domain controller by referring to the Properties for Active Directory Domains and Trusts in Domain Name Server. See the example below.
You will also need to find the path to SetSPN.exe on the domain controller. Make sure to enter this path with a trailing “\”.
Standard items for input tabs
There are several items that help you complete the input for each section. These include Messages and Navigation.
Data Entry Errors or Warnings: All errors and warnings must be cleared before the section is complete. In other words, you have to complete the required fields in each section and resolve any errors or warnings in order to complete the section.
Data Entry Progress: There is a traffic light symbol at the bottom of each input section. When all required fields are completed successfully, the light will be green. When completing a section, either fill in all of the required fields (and the appropriate optional fields) or delete the entries if you filled out the wrong section. The tool will not generate SPNs with a section partially completed.
The traffic lights indicate the following:
- Red – No Data Entered
- Yellow – Partial Required Data Entered
- Green – All Required Data Entered (the required data in the tab is complete)
Note that the “Main” tab uses the same “Traffic Light” symbols to keep track of which sections have been completed.
There is a link at the top of each input tab (usually cell B2) that says “Back to Main Tab”. The main tab is the main navigation for the tool. You can also use the spreadsheet tabs for navigation. Either way allows you to easily navigate between the various sections of the spreadsheet.
What additional features would you like to see in a Kerberos SPN setup tool? Leave your suggestions below.