Kerberos - auto-mate/CheatSheetWiki GitHub Wiki

To show your tokens

klist May need to run kinit first

To show account SPNs

setspn -L account

To show computer SPNs

setspn -L computer

SQL Services

Per Info , When using NT Service account (Not the case on GGBWHD0C for info only) the SPN's are created under the COMPUTER account.

If SPNS required add (assuming standard port 1433)

  • for NetBIOS name of SQL Server AS setspn –a MSSQLSvc/:1433 <Domain\SQL Server Account>

  • for the FQDN of the SQL Server setspn -a MSSQLSvc/:1433