For example, we have multiple web servers on non-windows machines, that are accessed by windows domain users.All servers are registered in that same windows domain DNS as well.For binary applications, that need access to that servers, we have one SPN in keytab, since windows SSPI API can give service ticket for any arbitrary string.But when it comes to browser requests, browsers are going to request tickets for SPNs based on different URLs.Is there a way to keep the same single SPN by configuring some sort of trust on domain level or something like that?
↧