Kerberos double-hop in ASP.NET 4.0 & SQL2008R2

Question

I have an ASP.NET 4.0 application within which I need to forward the authentication to the database. For the purposes of this request for assistance, lets call the web serve

Answer 1

Checklist for Double Hop issues {IIS and SQL Server}

http://blogs.technet.com/b/taraj/archive/2009/01/29/checklist-for-double-hop-issues-iis-and-sql-server.aspx

http://www.phishthis.com/2009/10/24/how-to-configure-ad-sql-and-iis-for-two-hop-kerberos-authentication-2/

http://support.microsoft.com/kb/810572

IIS to SQL Server kerberos auth issues

Answer 2

When you configure the SPNs for SQL Server, we have found that we need to include the PORT on which SQL Server listens (1433).

You should download and use Brian Booth's DelegConfig v2 tool to help you setup the correct configuration settings. http://blogs.iis.net/brian-murphy-booth/archive/2009/04/22/delegconfig-v2-beta.aspx

It will basically hold your hand the whole way through the process. We've found the tool to be invaluable.