IT:AD:SetSPN:Issues:Host Headers [Notes]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

# IT:AD:SetSPN:Issues:Host Headers #



<callout type="Navigation" class="small">

* [[../|(UP)]]
{{indexmenu>.#2|nsort tsort}}


</callout>


## Situation ##

You're offering some form of service (eg: WCF *.svc) from a website in IIS accessible via a *host header*.

## Solution ##

* Ensure the Virtual Directory is running under the correct AppPool.
    * Note that if you use Visual Studio to set up the VD (using the button in Properties/Web) it will *not* create the VD, but won't hook it up to the right AppPool.
* You won't be able to access the service from another computer using a host headers file unless ***both*** computers (server/client) have a HOST file entry for the server 
* You will not be able to access the server using Kerberos unless an SPN has been entered. Try something like:

Example:

    setspn -A HTTP/{HOST_HEADER} {NETBIOS_COMPUTER_NAME}
    setspn -A HTTP/myapp.myclient.local iisServerV1

Reference: [http://support.microsoft.com/kb/929650](http://support.microsoft.com/kb/929650)


* An alternate that I've heard several times is to use a second A record rather than a CN....hearsay for now.