Back To HaCluster and Active Directory
When creating a Kerberos ticket on the Active Directory for the HaCluster feature, you receive this error:
Failed to set property 'servicePrincipalName' to 'HTTP/xxxx.xxx' on Dn 'CN=xxx,CN=xxx,DC=xxx,DC=xx': 0x13.
WARNING: Unable to set SPN mapping data.
This means you already have an SPN defined in the Active Directory.
Use the command :
setspn -Q HTTP/xxxx.xxx
To display the information
You can see on which member/computer the SPN is associated
use the following command to remove the SPN entry
setspn -d HTTP/xxxx.xxx <user name>