Kerberos Constrained Delegation (KCD) or as I like to call it, less funthan chewing glass.

In my last post I briefly mentioned some issues I was having when attempting to configure SSRS and SharePoint for SSO by means of a ForeFront Threat Management Gateway. Well, after a few days of phone tag with Microsoft, and countless hours spent troubleshooting the Kerberos delegation chain, we finally found the solution. According to best practices it is highly recommended that if using Kerberobs with SSO via TMG, you only grant the TMG delegation rights to the required backend servers/services in AD. This would help stem the fallout should the TMG be compromised and start wreaking havoc upon…

Read More

Its Alive (the blog)... and my VMWare build (not alive, yet)

Well here it is, my first blog post there isn't much here right now, and I have to say I am not overly impressed with WordPress.com. I would much prefer to have hosted this blog on my own server in order to take advantage of expanded customization, specifically syntax highlighting since I intend to do a bit of blogging about T-SQL. That being said, I wanted it up and running cheaply and quickly, that much is accomplished. I expect that with time, I will migrate to a self hosted .org implementation in order to gain access to these features…

Read More