RE: IIS 6.0 Kerberos authentication
From: Wei-Dong XU [MSFT] (v-wdxu_at_online.microsoft.com)
Date: 07/06/05
- Next message: Jan Bühler: "Please Help! - Advanced Digest With IIS6 - 401.1"
- Previous message: kbtNick: "Re: Problem registering IISUBA.dll"
- In reply to: Eduard Timchenko: "IIS 6.0 Kerberos authentication"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 06 Jul 2005 03:00:42 GMT
Hi Eduard,
By default, IIS6 uses the worker process to serve the internet request,
which is one process providing the service (we could find this from site
properties->Home direcotry->Application Pool). We will need to specify one
account as this process's identity. This Technet IIS article introduces the
configuration of this identity for you:
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/f
05a7c2b-36b0-4b6e-ac7c-662700081f25.mspx
At your scenario, Kerberos will need to register the SPN name under this
identity account in Active Directory. This kb article introduces more
information for you with the resolution:
871179 You receive an "HTTP Error 401.1 - Unauthorized: Access is denied
due to
http://support.microsoft.com/?id=871179
Please feel free to let me know if you have any question. It is my pleasure
to be of any assistance.
Best Regards,
Wei-Dong XU
Microsoft Product Support Services
This posting is provided "AS IS" with no warranties, and confers no rights.
- Next message: Jan Bühler: "Please Help! - Advanced Digest With IIS6 - 401.1"
- Previous message: kbtNick: "Re: Problem registering IISUBA.dll"
- In reply to: Eduard Timchenko: "IIS 6.0 Kerberos authentication"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]