<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>SPN &#8211; platformadmin.com</title>
	<atom:link href="/blogs/paul/tag/spn/feed/index.xml" rel="self" type="application/rss+xml" />
	<link>/blogs/paul/</link>
	<description>Paul Homes blogging on SAS® platform administration topics</description>
	<lastBuildDate>Fri, 20 Sep 2024 08:49:34 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.10</generator>
	<item>
		<title>Config Notes: SAS Mid-Tier (Linux) IWA with Fallback</title>
		<link>/blogs/paul/2015/02/sas-mid-tier-linux-iwa-fallback-config-notes/</link>
					<comments>/blogs/paul/2015/02/sas-mid-tier-linux-iwa-fallback-config-notes/#comments</comments>
		
		<dc:creator><![CDATA[Paul Homes]]></dc:creator>
		<pubDate>Sat, 07 Feb 2015 08:44:21 +0000</pubDate>
				<category><![CDATA[General]]></category>
		<category><![CDATA[SAS Configuration]]></category>
		<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[IWA]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[SAS 9.4]]></category>
		<category><![CDATA[SPN]]></category>
		<guid isPermaLink="false">/blogs/paul/?p=4916</guid>

					<description><![CDATA[Update 26Sep2018: This post is now a few years old and naturally technology and security have progressed in that time. For more up to date information regarding delegation and, in particular, the requirement for constrained delegation when working with Windows Defender Credential Guard in Windows 10 and Windows Server 2016, please see Stuart Rogers&#8217; very &#8230; <a href="/blogs/paul/2015/02/sas-mid-tier-linux-iwa-fallback-config-notes/" class="more-link">Continue reading<span class="screen-reader-text"> "Config Notes: SAS Mid-Tier (Linux) IWA with Fallback"</span></a>]]></description>
		
					<wfw:commentRss>/blogs/paul/2015/02/sas-mid-tier-linux-iwa-fallback-config-notes/feed/</wfw:commentRss>
			<slash:comments>6</slash:comments>
		
		
			</item>
		<item>
		<title>SAS &#038; IWA: Check the Logs</title>
		<link>/blogs/paul/2012/06/sas-and-iwa-check-the-logs/</link>
		
		<dc:creator><![CDATA[Paul Homes]]></dc:creator>
		<pubDate>Fri, 29 Jun 2012 13:47:30 +0000</pubDate>
				<category><![CDATA[General]]></category>
		<category><![CDATA[SAS Configuration]]></category>
		<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[IWA]]></category>
		<category><![CDATA[Kerberos]]></category>
		<category><![CDATA[Logging]]></category>
		<category><![CDATA[SAS]]></category>
		<category><![CDATA[SAS 9.2]]></category>
		<category><![CDATA[SAS 9.3]]></category>
		<category><![CDATA[SPN]]></category>
		<category><![CDATA[Windows]]></category>
		<guid isPermaLink="false">/blogs/paul/?p=3015</guid>

					<description><![CDATA[When testing Integrated Windows Authentication (IWA) based client connections to SAS&#174; platform servers, it is well worth checking the SAS logs to verify the connections are being made the way you expect. SAS has a variety of methods up it&#8217;s sleeve to get you authenticated, including cached credentials, retrieving stored credentials from metadata, SAS token &#8230; <a href="/blogs/paul/2012/06/sas-and-iwa-check-the-logs/" class="more-link">Continue reading<span class="screen-reader-text"> "SAS &#038; IWA: Check the Logs"</span></a>]]></description>
		
		
		
			</item>
		<item>
		<title>SAS &#038; IWA: Reviewing SPNs</title>
		<link>/blogs/paul/2012/04/sas-and-iwa-reviewing-spns/</link>
		
		<dc:creator><![CDATA[Paul Homes]]></dc:creator>
		<pubDate>Sun, 08 Apr 2012 10:21:58 +0000</pubDate>
				<category><![CDATA[General]]></category>
		<category><![CDATA[SAS Configuration]]></category>
		<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[IWA]]></category>
		<category><![CDATA[Kerberos]]></category>
		<category><![CDATA[SAS]]></category>
		<category><![CDATA[SAS 9.2]]></category>
		<category><![CDATA[SAS 9.3]]></category>
		<category><![CDATA[SPN]]></category>
		<category><![CDATA[Windows]]></category>
		<guid isPermaLink="false">/blogs/paul/?p=3008</guid>

					<description><![CDATA[My last post was about configuring additional Service Principal Names (SPNs) in Active Directory to support the use of Integrated Windows Authentication (IWA) in a SAS&#174; platform installation that uses host name aliases in preference to physical host names. When working on a SAS &#038; IWA setup like this, I&#8217;d start by reviewing the currently &#8230; <a href="/blogs/paul/2012/04/sas-and-iwa-reviewing-spns/" class="more-link">Continue reading<span class="screen-reader-text"> "SAS &#038; IWA: Reviewing SPNs"</span></a>]]></description>
		
		
		
			</item>
		<item>
		<title>SAS &#038; IWA: Host Name Aliases and SPNs</title>
		<link>/blogs/paul/2012/04/sas-and-iwa-host-name-aliases-spns/</link>
					<comments>/blogs/paul/2012/04/sas-and-iwa-host-name-aliases-spns/#comments</comments>
		
		<dc:creator><![CDATA[Paul Homes]]></dc:creator>
		<pubDate>Sat, 07 Apr 2012 12:23:21 +0000</pubDate>
				<category><![CDATA[General]]></category>
		<category><![CDATA[SAS Configuration]]></category>
		<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[IWA]]></category>
		<category><![CDATA[Kerberos]]></category>
		<category><![CDATA[SAS]]></category>
		<category><![CDATA[SAS 9.2]]></category>
		<category><![CDATA[SAS 9.3]]></category>
		<category><![CDATA[SPN]]></category>
		<category><![CDATA[SQL Server]]></category>
		<category><![CDATA[Windows]]></category>
		<guid isPermaLink="false">/blogs/paul/?p=2680</guid>

					<description><![CDATA[I&#8217;m quite keen on using host name aliases, rather than their physical host names, when referring to machines in SAS&#174; platform installations. It does however mean a little extra configuration is required when using Integrated Windows Authentication. That is what this post is about: configuring Active Directory with additional Service Principal Names (SPNs) based on &#8230; <a href="/blogs/paul/2012/04/sas-and-iwa-host-name-aliases-spns/" class="more-link">Continue reading<span class="screen-reader-text"> "SAS &#038; IWA: Host Name Aliases and SPNs"</span></a>]]></description>
		
					<wfw:commentRss>/blogs/paul/2012/04/sas-and-iwa-host-name-aliases-spns/feed/</wfw:commentRss>
			<slash:comments>5</slash:comments>
		
		
			</item>
		<item>
		<title>SAS and IWA: Two Hops</title>
		<link>/blogs/paul/2012/01/sas-and-iwa-two-hops/</link>
					<comments>/blogs/paul/2012/01/sas-and-iwa-two-hops/#comments</comments>
		
		<dc:creator><![CDATA[Paul Homes]]></dc:creator>
		<pubDate>Mon, 23 Jan 2012 12:07:34 +0000</pubDate>
				<category><![CDATA[General]]></category>
		<category><![CDATA[SAS Configuration]]></category>
		<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[IWA]]></category>
		<category><![CDATA[Kerberos]]></category>
		<category><![CDATA[ODBC]]></category>
		<category><![CDATA[OLEDB]]></category>
		<category><![CDATA[SAS]]></category>
		<category><![CDATA[SAS 9.2]]></category>
		<category><![CDATA[SAS 9.3]]></category>
		<category><![CDATA[SAS/ACCESS]]></category>
		<category><![CDATA[SPN]]></category>
		<category><![CDATA[SQL Server]]></category>
		<category><![CDATA[Windows]]></category>
		<guid isPermaLink="false">/blogs/paul/?p=2714</guid>

					<description><![CDATA[Update 26Sep2018: This post is now several years old and naturally technology and security have progressed in that time. For more up to date information regarding delegation and, in particular, the requirement for constrained delegation when working with Windows Defender Credential Guard in Windows 10 and Windows Server 2016, please see Stuart Rogers&#8217; very useful &#8230; <a href="/blogs/paul/2012/01/sas-and-iwa-two-hops/" class="more-link">Continue reading<span class="screen-reader-text"> "SAS and IWA: Two Hops"</span></a>]]></description>
		
					<wfw:commentRss>/blogs/paul/2012/01/sas-and-iwa-two-hops/feed/</wfw:commentRss>
			<slash:comments>7</slash:comments>
		
		
			</item>
		<item>
		<title>SAS and IWA (Integrated Windows Authentication) Notes</title>
		<link>/blogs/paul/2011/12/sas-and-iwa-notes/</link>
					<comments>/blogs/paul/2011/12/sas-and-iwa-notes/#comments</comments>
		
		<dc:creator><![CDATA[Paul Homes]]></dc:creator>
		<pubDate>Sat, 31 Dec 2011 03:02:12 +0000</pubDate>
				<category><![CDATA[General]]></category>
		<category><![CDATA[SAS Configuration]]></category>
		<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[IWA]]></category>
		<category><![CDATA[Kerberos]]></category>
		<category><![CDATA[ODBC]]></category>
		<category><![CDATA[OLEDB]]></category>
		<category><![CDATA[SAS]]></category>
		<category><![CDATA[SAS 9.2]]></category>
		<category><![CDATA[SAS 9.3]]></category>
		<category><![CDATA[SAS/ACCESS]]></category>
		<category><![CDATA[SPN]]></category>
		<category><![CDATA[SQL Server]]></category>
		<category><![CDATA[Windows]]></category>
		<guid isPermaLink="false">/blogs/paul/?p=2689</guid>

					<description><![CDATA[Over the past year I have worked on a number of SAS&#174; 9.2 platform installations helping to get Integrated Windows Authentication (IWA) working nicely for single sign-on (SSO) for the SAS platform. Whilst it&#8217;s relatively easy to turn IWA on, it can get a bit trickier when you try to go a bit further than &#8230; <a href="/blogs/paul/2011/12/sas-and-iwa-notes/" class="more-link">Continue reading<span class="screen-reader-text"> "SAS and IWA (Integrated Windows Authentication) Notes"</span></a>]]></description>
		
					<wfw:commentRss>/blogs/paul/2011/12/sas-and-iwa-notes/feed/</wfw:commentRss>
			<slash:comments>6</slash:comments>
		
		
			</item>
	</channel>
</rss>
