Windows server 2008 R2
Trying to set up delegation for a web server to pass credentials back to SQL 2008 database. Delegated the web server in AD and set it to restrict to the spn of the sql service account with kerberos only. This is a domain account. It didn't work. Then, we allowed delegation for any service and immediately it began working. We switched it back to restricted as a test and again it quit working, but when we removed the restrictions, it still did not work. That was about an hour ago. Can anyone telll me what's going on. Are there kerberos tickets that have to expire before this starts working again?
Any info would be helpful. Thanks