IIS 6.0 kerberos auth

From: laurent (ripoll_laurent_at_yahoo.fr)
Date: 10/30/03 

Date: Thu, 30 Oct 2003 13:45:03 +0100

Hi,

I have a client with w2k (IE 6) and a Windows 2003 server (with IIS 6.0).
I would like to setup IIS 6.0 to authenticate the users trying to access
to a web page. I'd like to use kerberos v5.

During the IIS setup, I enabled "Integrated Windows authentification".

But each time I go to this page, I'm authenticated with the NTML
protocol and not kerberos.
I thought that the default protocol used for this kind of auth. was
kerberos.
I don't know what is wrong with this setup.

Do you have some ideas?

Thanks. 

-- 
---------------
laurent Ripoll	
www.altasys.fr
---------------

Relevant Pages

  • Re: IIS 6.0 kerberos auth
    ... I would like to setup IIS 6.0 to authenticate the users trying to access ... I'd like to use kerberos v5. ... During the IIS setup, ...
    (microsoft.public.inetserver.iis.security)
  • RE: Server not found in Kerberos database error on ldapsearch
    ... Realm: EXAMPLE.COM ... So what kind of setup do you think is good for such tests? ... I should setup a VPN-gate that is able to authenticate ... on Kerberos, authorization on LDAP-groups. ...
    (comp.protocols.kerberos)
  • Re: Windows GSSAPI ssh connection via cross-realm authentication problems
    ... I think you misunderstand the role of Kerberos here. ... If the SSH service is in realm ... The non-Windows KDC needs to trust any user ... kdcadmin user's home directory and that one can authenticate just fine. ...
    (comp.protocols.kerberos)
  • Re: Kerberos machine authentication - apparent authentication fail
    ... >From what I can tell the kerberos failure shown in netdiag does not always ... mean that kerberos authentication is not being used. ... computer for logon events and the domain controller for account logon events ... > authenticate with K after initial failures. ...
    (microsoft.public.windows.server.security)
  • OpenSSH, Kerberos, GSSAPI, and windows clients
    ... My FreeBSD is happy authenticate from itself to itself via its own KDC. ... backport of Simon Wilkinson's gssapi patch. ... downloaded WinSCP 375 beta which claims to have SSH2/MIT Kerberos V ...
    (SSH)