Hi,
at a customers site we use a UCS domain and have some domain joined Hyper-V servers which should be able to (Live-)migrate its vservers among each other - which fails. They use Kerberos for authentication of migration requests as described here:
- https://techcommunity.microsoft.com/t5/virtualization/live-migration-via-constrained-delegation-with-kerberos-in/ba-p/382334
- https://www.hyper-v-server.de/management/kerberos-delegierung-zur-hyper-v-livemigration-mit-windows-server-2016/
- https://docs.microsoft.com/de-de/windows-server/virtualization/hyper-v/deploy/Set-up-hosts-for-live-migration-without-Failover-Clustering
The resulting error looks exactly like when trying Kerberos migration without prior setting up the required delegation as per the above instructions. Seems like these settings just don´t work?
Did this several times before on Windows-only domains and it always worked as expected.
Any hints on where to start diagnosing this stuff? Or is this kind of setup not supported in a samba/ucs domain?
Thanks for help and any hints!