access denied on new site collections

Hi

I have an interesting problem today:-)

I only use port 80.

I use host-name for my webapplication and site collection, I also

use claims. 

So that my site collection owners have the prefix:

$owner = ("i:0#.w|" + $DOMAIN +"\spadmin")
$secondowner = ("i:0#.w|" + $DOMAIN +"\spfarm")

I can happily create my webapplication and site collection without any issues when i use the http://servername in the creation of the webapplication:

New-SPWebApplication -Name $WebApplicationName -hostheader $Hostheader -URL ("http://" + $Hostheader) -ApplicationPool $fellesomradeappPool -Port $fellesomradeport -ApplicationPoolAccount (Get-SPManagedAccount $WebAppPoolaccount) -DatabaseName $fellesomradedbName -DatabaseServer $dbServer -AuthenticationProvider $ap #-URL $fellesurl

So above; $hostheader = servername

The url then becomes "http://severname"

All good.

Now the problem. I first remove the above webapplication and site collection + apppool...

I create a DNS pointer one.domain.com, which points to the sharepoint server.

I then use the "one.domain.com" as $hostheader instead of using the "servername".

After creating the site collection I now get the awfull access denied when i try to enter the site collection "This site is not shared with you...etc".

I have tried to access the site wit hall users including spadmin (Sharepoint setup admin) and farm admin account. But I am locked out of my own room...

Any ideas ?

br

Bjorn