Using SMB or SharePoint Data Sources

If you want to use SMB or SharePoint Data Sources, you must configure the Active Directory account to permit Kerberos delegation to each of your SMB and SharePoint data sources.

For network shares and SharePoint servers, do the following:

Following these steps, you will enable delegation from the Gateway server to the target server(s).

1. Open Active Directory Users and Computers.
2. Find the computer object corresponding to the Gateway server.

   Note: If you are running the Gateway server under a User account, select that User object instead.

3. Right-click on the user and select Properties.
4. Open the Delegation tab.
5. Select Trust this computer for delegation to specified services only.
6. Under that select Use any authentication protocol.
7. Click Add.
8. Click Users or Computers.
9. Search for the sever object for the SMB share or SharePoint server and click OK.
   • For SMB shares, select the cifs service.
   • For SharePoint, select the http service.
10. Repeat these steps for each server that the Files Advanced Gateway server will need to access.
11. Repeat this process for each Gateway server.

These delegation changes, can take a few minutes to propagate depending on the size of the domain forest. You may need to wait up to 15 minutes (possibly more) for the changes to take effect. If it's still not working after 15 minutes, try restarting the Files Advanced Gateway service.