Kerberos Authentication Issues

Troubleshooting Kerberos issues is one of the least fun things to do. Mostly, because when it fails, there will be no error message. It will silently revert to NTLM, and you won’t know why.

I’ve been having a bit of fun getting our new Sharepoint 2010 install to work. I’ve set the SPNs correctly by using “setspn -a HTTP/thesharepoint.domain.co applicationPoolAccount”. This worked fine for one site, however the second one was still reverting to NLTM. Why?? I enabled kerberos tracking on the servers as per this KB – 262177. No errors that were relevant were recorded. I even started packet tracing the kerberos tickets. It was then that I noticed this error “KRB_ERR_S_PRINCIPAL_UNKNOWN” . Strange.. I re-checked, and the SPN (service principle name) was added so why is it unknown? After several hours of fiddling, I realised it was a duplicate SPN. Now, why the error message can’t say that, I don’t know. Infuriating. I found the duplicate SPN by running the following command:
ldifde -f check_SPN.txt -t 3268 -d “” -l servicePrincipalName -r “(servicePrincipalName=HOST/mycomputer*)” -p subtree
Obviously change “HOST\mycomputer” to the SPN you are checking. Delete the SPN with “setspn -d”. Having done this, kerberos now works well…

Office 2010 Rollout Fun

I’ve been attempting to install office 2010 to several PCs using SCCM 2007 (sp2, r3). What a pain. You’d think deploying the exe with an appropriate config.xml would be ok, but it seems to ahve serious issues upgrading older versions. Originally, 2010 was deployed sans outlook as we’er a Notes house, however, Outlook is being deployed at one site so I create an MSP that would modify it, using setup.exe /admin. Easy enough. This worked on most of the computers, but some of them it managed to wreck.

Found [0] resource files under the default folder.
Resource File Manager : Current user’s LCID is [2057].
Resource File Manager : error : ResourceFileManager does not contain at least one ResourceFile. Unable to find best match ResourceFile for CultureTag=[en-GB].
Unable to locate a suitable resource file which contains resources that match the current user’s Locale [2057].

Found [0] resource files under the default folder.Resource File Manager : Current user’s LCID is [2057].Resource File Manager : error : ResourceFileManager does not contain at least one ResourceFile. Unable to find best match ResourceFile for CultureTag=[en-GB].Unable to locate a suitable resource file which contains resources that match the current user’s Locale [2057].

‘Setup Error’, Message: ‘The language of this installation package is not supported by your system.

Occasionally, setup would just reboot the machine when I tried to modify it. I couldn’t run it, I could’t manually use /uninstall either.

This is a UK machine with UK location and UK office. I’ve no idea waht the problem is, but I managed to sort it out with a combination of running the office 2010 uninstall tool which is here . I uninstalled everything that was remotely “officey” from ARP including the compatibility tools, ran every uninstall utility in the mentioned site and finally got it working.

As far as I can tell, something installed previously thought it was a finny language, though I’ve no idea what or why.

This has been an utter pain, and I’m very worried about deploying it company wide if it is this picky. Got it fixed eventually with the steps listed above though.

Good luck!

Sharepoint 2010

Currently installing shareopint 2010 at work. With the hope that it will become the new intranet and more. I think the ultimate plan is for some sort of document management and de-duplication of the same files in everyone’s home drive! That alone should save a few tb!

I’ll let you know how it goes and any show stoppers we find. So far so good though