Debugging Kerberos Authentication

If you ever had to enable Kerberos for SharePoint Performance Point or to fix the data refresh issues with excel services, you will need this tool:

Deleg Config

Its a web app that checks the current App Pool account and makes sure its configured correctly. The usual issue is duplicate SPNs.

Update: IIS.net has a beta v2 version…

http://www.iis.net/downloads/community/2009/06/delegconfig-v2-beta-(delegation-kerberos-configuration-tool)