Mapping the Service Principal Name (SPN) to a Microsoft User Account

The Kerberos service principal name is defined as service name/Full_Qualified_Host_Name

Procedure
1. Open a command prompt window.
2. Enter the following command to map the Kerberos service principal name (SPN) to a user account:

   setspn -A service name/fully_qualified_host_nameuser account

   For example, for the HTTP/testtibcoapix.pa.tibco.com service principal name, use the following command:

   setspn -A HTTP/testtibcoapix.pa.tibco.com testtibcoapix

   • setspn tool is found on the Windows 2000 Resource Kit.
   • Refer to the following url for details:

     http://social.technet.microsoft.com/wiki/contents/articles/717.service-principal-names-spns-setspn-syntax-setspn-exe.aspx