We have a setup with an IIS and a SQL server and have implemented Kerberos to use SQL Sercurity directly.
We have a AD forest: Internal.local and the setup works fine there.
Now the customer wants external access through external.com and of course we cannot use the current setup for kerberos. Internally we can access internal.local - get a kerberos ticket - access the external.com and continue using that ticket.
But is there a solution to get the kerberos to work for the external.com access?
I guess we have to trust the two somehow??