Debugging Kerberos Authentication

Have you guys ever had problems configuring/debugging Kerberos Authentication and scratched your heads and gone all wild figuring out - I did everything right. Why can I still not Sign IN???

Very recently i had got messed up in a similar situation till i came across this tool by Brian Murphy. The features this tool boasts of are

• Supports IIS 6.0 as well as IIS 7.0 (useKernelMode / useAppPoolCredentials)
• Allows adding backend servers of type UNC, HTTP, LDAP, OLAP, SQL, SSAS, and RDP
• Allows chaining of multiple hops (versus only a single backend)
• Performs duplicate SPN check against all trusted domains.
• /Set/SPNs.aspx - Allows adding and removing of ServicePrincipalNames
• /Set/Delegation.aspx - Allows changing Trust for Delegation settings.
• /Set/Providers.aspx - Allows correcting of inadequate NTAuthenticationProviders settings.
• /Report.aspx - Gives a picture of what is right and what is wrong.
• /Wizard.aspx - A set of wizard steps that supports adding more tiers to /Report.aspx.
• /Test.aspx - Allows double-hop tests for webServer-to-Sql or webServer-to-fileServer or webServer-to-webServer

You can find more about the tool at
http://blogs.iis.net/brian-murphy-booth/archive/2007/03/09/delegconfig-delegation-configuration-reporting-tool.aspx

It is also published on IIS.NET and can be downloaded at
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1887

So free yourself of Kerberos authentication woes now!.