Re: kerberos for iis ?

From: Bernard (qbernard_at_hotmail.com)
Date: 11/29/03


Date: Sat, 29 Nov 2003 11:48:02 +0800

Could it be the client side ?
see if this help -

HOW TO: Troubleshoot Kerberos-Related Issues in IIS
http://support.microsoft.com/?id=326985

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"Sanjay" <sanjay@cisco.com> wrote in message
news:1069726635.845004@sj-nntpcache-5...
> Hi,
>
> Is there a simple howto on getting a Win2K client, logged on to Active
> Directory (AD) domain, get a file from IIS server (running on AD server)
> with Kerberos authentication ..?
>
> -- IIS server is running on the Active Directory server (win2k domain
> server).
> Win2k Server, SP2
> IIS 5.0
> -- Win2K client is having SP2 & IE 5.5 SP2.
>
> With network tracing, I see IIS sends back WWW-Authenticate headers of
> Negotiate first, and then NTLM, but for some reason, Win2k client picks up
> the NTLM related handshake, not Negotiate.
>
> During Windows logon on this client, I made sure that I use a sample user
> login from the above AD domain, and also made sure that Kerberos was
> exchanged between the client and AD KDC server.
>
> Now, how do I get the Kerberos handshake going over HTTP against IIS that
is
> running on the same AD server ?
>
> Anyone got this going against any other HTTP server (Apache?)
>
> tia,
> Sanjay
>
>
>


Relevant Pages

  • RE: 401.2 Errors
    ... the server name as their proxy server, ... really understand the point in deploying the Firewall Client to all clients. ... I had a look at the log file but it only seems to be ... recording access that the IIS Server itself goes through. ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect Computer Problem at 2 Customer Sites
    ... I understand this issue to be: the client ... please restart the IIS service. ... join the domain has got the valid IP address and DNS server address in the ... Microsoft Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Problem with connect computer wizard
    ... You mentioned that you're using Anonymous access with Administrator ... Open ConnectComputer properties in IIS. ... And there is only the DNS server be configured on client ...
    (microsoft.public.windows.server.sbs)
  • Re: Kerberos authentication fails
    ... we had have kerberos log activated yesterday while we test the ... Client Server Name: ... * System Event logs in GPRSServer03 ... Server domain: DISTROMEL.GPRS ...
    (microsoft.public.sqlserver)
  • Re: Kerberos authentication fails
    ... we had have kerberos log activated yesterday while we test the ... Client Server Name: ... * System Event logs in GPRSServer03 ... Server domain: DISTROMEL.GPRS ...
    (microsoft.public.win2000.security)