IIS 6.0 Kerberos authentication

From: Eduard Timchenko (etimche_at_newsgroup.nospam)
Date: 07/05/05

  • Next message: kbtNick: "Problem registering IISUBA.dll" 
    Date: Tue, 5 Jul 2005 07:49:08 -0700

    Hi,
    I have AAA site (not default web site) in IIS 6 on Windows 2003 Server.
    The AAA site uses Windows Integrated authentication.

    I have a problem of accessing the AAA site using DNS or FQDN name from other
    Windows 2003 Servers in the same domain - i have been prompted to enter user
    and password and get error of wrong user or password (security log recieve
    authentication failure messages).

    I do succeed to access AAA site by using URL with IP address

    Using AuthDiag tool i see that i have a problem with Kerberos Authentication
    (SPN not set), but NTLM authentication succeeds (this is why URL with IP
    works)

    More than that - if i configure IIS to work in IIS 5 compatibility mode - i
    do not have any problem to access the AAA site using DNS name or FQDN.

    The Kerberos, NTLM settings and Security settings on all Windows 2003
    servers seems to be correct. The IE settings of trusted sites & local sites
    does not resolve a problem.

    Could you help me to understand why the authentication fails and what to do
    in order to use Worker Process Isolation mode?

    Thanks 

    -- 
Eduard Timchenko
Business Technology Solutions Group
Verint Systems
  • Next message: kbtNick: "Problem registering IISUBA.dll"

    Relevant Pages

    • Re: Change in ASP.Net authentication between Win2000 and Win2003
      ... > is turning on/off Kerberos is occuring. ... It control how IE deals with "Authentication: ... when you put IIS6 in a domain and have "Integrated Windows Authentication" ...
      (microsoft.public.windows.server.security)
    • Re: Change in ASP.Net authentication between Win2000 and Win2003
      ... > is turning on/off Kerberos is occuring. ... It control how IE deals with "Authentication: ... when you put IIS6 in a domain and have "Integrated Windows Authentication" ...
      (microsoft.public.inetserver.iis.security)
    • Re: Disable ALL Lan Manager Authentication
      ... You can manage lan manager authentication level to allow only ... careful with Exchange and VPN servers. ... 98 or non domain computer to access the ipsec required server. ... > I'm in a pure Windows 2003 domain environment with Windows XP clients. ...
      (microsoft.public.windows.server.security)
    • Re: Need help configuring Wireless Connection profile
      ... and I can only use the intel OR windows utility, not both at the same time. ... Windows authentication for all users,4129,LRG\ryanv,4149,Wireless WPA2 ... SMALL BUSINESS SERVER: ... STEP #1 Install Certificate Services ...
      (microsoft.public.windowsxp.general)
    • Re: form authentication and webservices
      ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... We will be using Windows Authentication on the Web Services side (same ... Dominick Baier ...
      (microsoft.public.dotnet.framework.aspnet.security)