PAW integrated Login with constrained Kerberos?

[Ganos Lal]

Hello,

For integrated Login to PAfE and PA Spreadsheet Services we need to configure Kerberos for an user. This configuration have to be unconstrained (Trust this user for delegation to any service) in Active Diretory.
In last months some of our customers declared this method unsave and blocked using this. So wie were trying to use a ctonstrained configuration (Trust this user for delegation to specific services only) with service type HTTP to PA database server. But it isn't working and depedning to IBM support there is no other supported method than the unconstrained.
Has anyone had the same problem and if so, how did you solve it?

Thsnka and Regards,
Jani