Kerberos Constrained Delegation and Sharepoint

[R10T_]

I am trying to enable KCD for MS Sharepoint with no luck. I have followed the technical note and section in the admin manual. I have also tried most things I have found in other postings.

When using Kerberos only I get an error saying TGT failed and I am unable to login. If I allow NTLM then I can login but the KCD account doesn't 'kick in' and I get GC errors and SSO to sharepoint fails.

Does anyone have any more info on setting up KCD at all that may be useful. I am guessing someone else must have set this up successfully.

Thanks

Fetch Kerberos TGT for user xxxx realm XXXXX failed: Credential validation failed against xxx.xxx.xxx.xxx

GetUserGroups: Found GC xxx.xxx.xxx.xxx, GC Domain XXXXXX

- GetUserGroups: Fails to connect to GC

6.5R1 (build 14599) - AD Windows Server 2008 R2 - Sharepoint 2007

[SamiK_]

Have you double checked the account and password used by IVE to get the tickets?

[SamiK_]

I followed this and had success:

http://www.juniper.net/techpubs/software/ive/guides/howtos/SSLConstrainedDelegation.pdf

[arnert]

This juniper document is ver 6.4 from 10 years ago!!. Anyone have an update for 2020? MS Server 2012 2016?