Re: kerberos for iis ?

From: Bernard (qbernard_at_hotmail.com)
Date: 11/29/03 

Date: Sat, 29 Nov 2003 11:48:02 +0800

Could it be the client side ?
see if this help -

HOW TO: Troubleshoot Kerberos-Related Issues in IIS
http://support.microsoft.com/?id=326985 

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Sanjay" <sanjay@cisco.com> wrote in message
news:1069726635.845004@sj-nntpcache-5...
> Hi,
>
> Is there a simple howto on getting a Win2K client, logged on to Active
> Directory (AD) domain, get a file from IIS server (running on AD server)
> with Kerberos authentication ..?
>
> -- IIS server is running on the Active Directory server (win2k domain
> server).
> Win2k Server, SP2
> IIS 5.0
> -- Win2K client is having SP2 & IE 5.5 SP2.
>
> With network tracing, I see IIS sends back WWW-Authenticate headers of
> Negotiate first, and then NTLM, but for some reason, Win2k client picks up
> the NTLM related handshake, not Negotiate.
>
> During Windows logon on this client, I made sure that I use a sample user
> login from the above AD domain, and also made sure that Kerberos was
> exchanged between the client and AD KDC server.
>
> Now, how do I get the Kerberos handshake going over HTTP against IIS that
is
> running on the same AD server ?
>
> Anyone got this going against any other HTTP server (Apache?)
>
> tia,
> Sanjay
>
>
>

Relevant Pages

  • RE: 401.2 Errors
    ... the server name as their proxy server, ... really understand the point in deploying the Firewall Client to all clients. ... I had a look at the log file but it only seems to be ... recording access that the IIS Server itself goes through. ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect Computer Problem at 2 Customer Sites
    ... I understand this issue to be: the client ... please restart the IIS service. ... join the domain has got the valid IP address and DNS server address in the ... Microsoft Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem with connect computer wizard
    ... You mentioned that you're using Anonymous access with Administrator ... Open ConnectComputer properties in IIS. ... And there is only the DNS server be configured on client ...
    (microsoft.public.windows.server.sbs)
  • Re: Kerberos with Windows Integrated authentication
    ... behaviour if your Web server is in the client broweser's Internet zone. ... referencing it by computer name rather than FQDN), the browser will request ... Obviously, if you want to use Kerberos for authentication, you will either ...
    (microsoft.public.windows.server.security)
  • Re: Kerberised NFS
    ... Kerberised NFS presumably requires authentication and encryption between client and server, so presumably the client needs to get a ticket prior to contacting the server. ... server with kerberos security options, and successfully automounting user's home directories on client machines when they log in. ...
    (comp.protocols.kerberos)