SECURITY
Assigning SPNs without using the domspnego utility
Use of the domspnego utility is recommended when you want to assign SPNs to one account that multiple IBM Lotus Domino servers share, which is best practice. If instead you assign SPNs to a separate account for each Domino server, such as the default Local System account, you might want to collect DNS names manually and have your Active Directory administrator run setspn.exe manually instead because this case would require the domspnego utility to be run once for each account used.
Related topics
Manually recording DNS names to be used in SPNs
Assigning SPNs using the setspn utility
Setting up the Windows service for Domino
Troubleshooting Windows single sign-on for Web clients
Glossary
Feedback on
Help
or
Product Usability
?
Help on Help
All Help Contents
Glossary