SPNego and no domain
I'm in a situation where I'm about to implement SPNego, and I realize that I might be in an impossible situation.
The users are part of a domain, but the portal server is not part of any domain. That is the case and cannot be changed.
But as part of setting up SPNego I need an SPN for the portal server, which in my understanding is not possible since it is not part of the domain.
In the old days I would put an IisProxy on a server within the domain and all the troubles would go away. But how do I go about this in an SPNego environment?