StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>Windows services register themselves with either a User Principal Name or a Service Principal Name (<a href="http://msdn.microsoft.com/en-us/library/bb628618.aspx" rel="noreferrer">documentation</a>). To quote from that link: "<em>If the service is running under the LocalSystem, LocalService, or NetworkService account, a service principal name (SPN) is generated by default in the form of host/ because those accounts have access to the computer's SPN data. If the service is running under a different account, Windows Communication Foundation (WCF) generates a UPN in the form of @.</em>" In fact, this quote is rather similar to what your error message is stating. So it seems that...</p> <p>a) if the service is running under the Local Service account or similar standard account, then you need to adjust your <em>client</em> configuration file to have this, where the actual server's name is "address" and the endpoint is running on port 4503:</p> <pre><code><identity> <servicePrincipalName value="host/address:4503" /> </identity> </code></pre> <p>b) alternately, if you are running under a dedicated service account (let's call it "ServiceAccount" on the domain "MyDomain"), then you want</p> <pre><code><identity> <userPrincipalName value="ServiceAccount@MyDomain" /> </identity> </code></pre> <p>Please note that you may need to use the fully-qualified domain name in both cases, including the Forest and Tree levels. For a simple domain inside of your private LAN/WAN, that will mean address.MyDomain.local and ServiceAccount@MyDomain.local. If your domain is in a tree called MyTree then it will be ServiceAccount@MyDomain.MyTree.local; if that is in a forest called MyForest then it will be Serviceaccount@MyDomain.MyTree.MyForest.local (and similar for ServicePrincipalName). The fully-qualified name is needed <a href="http://msdn.microsoft.com/en-us/library/vstudio/bb463274%28v=vs.100%29.aspx" rel="noreferrer">when you are using Kerberos</a> for authentication.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload