kerberos and AD integration for webfiltering

[Ashfold]

I have been trying to set up a webproxy today with AD authentication and I am having problems with kerberos

 

I have used the script here https://technet.microsoft.com/library/ee176972.aspx to look at the SPNs

 

CN=Squid OU= DC= DC=

class: user

user logon: Squid

-- HTTP/websafety60

-- HTTP/websafety52

-- HTTP/websafety52..

 

Is this an issue or are they ok linked to the one user I am only using websafety60, I set up websafety52 earlier today but I had different problems and was told to use the latest version (I am labeling the proxies with the version hence the numbers at the end of the machine names)

 

If I run setspn /x is in not reporting any duplicate SPNs

 

If I run setspn /d HTTP/websafety52 or setspn /d HTTP/websafety52.. it reports working and object updated but the output from the .vbs does not change.

 

Can anyone shed some light on kerberos I am pulling my hair out

 

M