Re: Delegation / IIS6 / share located on another computer

thanks for the pointer

"DaveMo" <david.mowers@xxxxxxxxx> wrote in message
news:1181306261.842227.179340@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Jun 8, 12:49 am, "J Talbot" <talbotj...@xxxxxxxxx> wrote:
The URL that is used ishttp://serverb:81 (the port IIS is running on)
The IIS server is called serverb

http://serverbis in the local intranet zone on the client and as
mentioned
earlier Enable IWA is turned on.

Thanks

John



"DaveMo" <david.mow...@xxxxxxxxx> wrote in message
The only reason that the client should fall back to NTLM in this
scenario is if the KDC can not find a host account that would match
the URL.

What is the URL that is used in IE?
What is the name of the IIS server?

Dave- Hide quoted text -

- Show quoted text -

SPNs can be applied to a unique port and since you aren't using the
default port for HTTP this might be why the ticket request is failing.
Try setspn -A http/serverb:81 serverb (assuming IIS virtual folder is
configured to use an app pool using Network Service/Local System
identity).

This is just a guess - I don't know whether using a different port
would cause the failure and I can't easily repro your problem at this
time.

A good diagnostic tool for this kind of problem is the latest version
of klist. If you can find the right version it allows you to request
tickets to arbitrary services from the command line and makes it a bit
more direct to figure out what the failure cases might be.

HTH.

Dave




.

Relevant Pages

  • Re: Delegation / IIS6 / share located on another computer
    ... What is the name of the IIS server? ... default port for HTTP this might be why the ticket request is failing. ... configured to use an app pool using Network Service/Local System ... more direct to figure out what the failure cases might be. ...
    (microsoft.public.inetserver.iis.security)
  • IIS Server Log security breach?
    ... I recently found this on my IIS server after being contacted ... that my webserver attempted to scan someone's machine on port 80. ... I've talked to other techs here who have not installed this ... admins but before I contact I need to know if this is the intruder's ip ...
    (Incidents)
  • IIS Server Log security breach?
    ... I recently found this on my IIS server after being contacted ... that my webserver attempted to scan someone's machine on port 80. ... I've talked to other techs here who have not installed this ... admins but before I contact I need to know if this is the intruder's ip ...
    (Security-Basics)
  • Help with NAT
    ... I have an IIS server that I would like to put behind a linux firewall ... port 443 requests to the appropriate internal server. ... the routing table and is there anything else I need to configure? ...
    (comp.os.linux.networking)
  • Help with NAT
    ... I have an IIS server that I would like to put behind a linux firewall ... port 443 requests to the appropriate internal server. ... the routing table and is there anything else I need to configure? ...
    (comp.os.linux.networking)