MC+A

Since the Google Search Appliance introduced support for both Microsoft SharePoint and Kerberos many of our customers have begun to implement Kerberos more often technology. 

Kerberos with SharePoint can provide a Single Sign On technology that is silent.  However, the reason that most companies have not implemented Kerberos because it’s difficult to debug.  I have found this tool develop by Brian Murphy to save weeks of debugging time.  It’s easy to set up and provides tests for Kerberos authentication as well as delegation.

http://blogs.iis.net/brian-murphy-booth/archive/2007/03/09/delegconfig-delegation-configuration-reporting-tool.aspx

If you are an early adopter of Windows 7 and you own a Google Search Appliance, be sure to set the following local policy so that Kerberos will be enabled:

• Local Security Policy
  • Local Policies
    • Security Options
      • Network Security: Configure encryption types allowed for Kerberos

Enabling all options under Network Security: Configure encryption types allowed for Kerberos