Re: Integrated Windows Authentication Timeout?



Is that exception thrown by the connection attempt to SQL (thus an error in
the delegation) or does that happen at the browser level? Can you show a
stack trace?

IWA doesn't time out, although Kerberos tickets can expire. 20 minutes
sounds way too short to have anything to do with that though.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Bradley Landis" <BradleyLandis@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:76CA1BCC-67A8-462A-A41D-F3D082DB395F@xxxxxxxxxxxxxxxx
Environment:
IIS 6.0
ASP.NET 2.0
Integrated Windows Authentication
Identity impersonate=true
Constrained Delegation set to impersonate user while connecting to SQL
Server

Problem scenario:
Everything above works perfectly well except when the user leaves a page
sit
idle for 20 minutes or so. At that point if they come back and click a
link
on the page the following error is thrown:

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'

I do not use any session data so the session timeout should not be the
problem. I tried extending the session timeout anyway as an experiment
and
it did not have any effect. I know there are other timeouts associated
with
Forms Authentication, but are there other timeouts associated with
Integrated
Windows Authentication? If so, how and where do I configure them.

Thank you,

Bradley


.