Monday, May 24, 2010

Configure Kerberos for SharePoint


Setup spns for the host headers, e.g. http/sample.com

ensure that the kerberos buffer size on IIS is greater than the max that could possibly be sent from a client. this may also need a buffer size change on client IE

ensure that host file entries on each wfe, point to itself, i.e. 127.0.0.1

ensure that F5 or any load balancer is configured for sticky sessions, i.e. once a client makes a request on server X, it remains on server X for sometime (predefined timeout) and does not get load balanced onto other servers in the F5 pool

bypass proxy in web.config of the applications on all wfe's: attached image

No comments:

Post a Comment