Before you begin configuring Kerberos constrained delegation with IAG SP1

  • Article

Applies To: Intelligent Application Gateway (IAG)

If you have previously configured IAG with Service Pack 1 and ISA Server to enable Kerberos constrained delegation manually, perform the procedure in Resetting IAG and ISA Server after manual configuration of Kerberos constrained delegation. If you have not, proceed to Installing Microsoft Windows support tools.

Note

Before you start the configuration process, log on to Microsoft Windows as a domain user with full administrator privileges.

Resetting IAG and ISA Server after manual configuration of Kerberos constrained delegation

Enabling Kerberos constrained delegation in an IAG server that has already been configured manually may result in errors. To eliminate this possibility, it is strongly advised that you perform the following procedure.

To undo manual configuration of Kerberos constrained delegation

  1. Back up the IAG configuration.

  2. Undo the manual configuration you performed. Do so by undoing the procedures described in IAG KCD_KB.doc.

Installing Microsoft Windows support tools

To limit the HTTP API IP Listen List, you must install the Microsoft Windows support tools, which include an HTTP Configuration Utility.

To install Microsoft Windows support tools

  1. Insert the Windows Server 2003 CD in the CD-ROM or DVD-ROM drive.

  2. When the CD opens, click Perform Additional Tasks, and then click Browse this CD.

  3. Double-click Support > Tools > SUPTOOLS.MSI, and then click Next.

  4. Type your information in the Name and Organization fields, and then click Next.

  5. Click Next.

  6. Click Next again to start the installation. When the installation is complete, click Finish.