Re: Delegation / IIS6 / share located on another computer

DaveMo is correct.

If you are accessing IIS on a non-standard port, then there is no SPN currently registered for that FQDN. Reread the link I posted earlier on SPNs for instructions on how to configure an additional SPN for your IIS server on that non-standard port.

Cheers
Ken

"J Talbot" <talbotj123@xxxxxxxxx> wrote in message news:46690a6d$0$18884$9a6e19ea@xxxxxxxxxxxxxxxxxxxxxxxxxxxx
The URL that is used is http://serverb:81 (the port IIS is running on)
The IIS server is called serverb

http://serverb is in the local intranet zone on the client and as mentioned earlier Enable IWA is turned on.

Thanks

John


"DaveMo" <david.mowers@xxxxxxxxx> wrote in message
The only reason that the client should fall back to NTLM in this
scenario is if the KDC can not find a host account that would match
the URL.

What is the URL that is used in IE?
What is the name of the IIS server?

Dave





.

Relevant Pages

  • Re: Windows authentication query
    ... Yes, ideally setting the SPN should be fine, but it did not work. ... > install IIS, only the NetBIOS name of the IIS server is registered with ... > FQDN) with the KDC. ... IIS server in the list of sites that would be available in the intranet. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS to IIS using kerberos and non-standard web port
    ... As mentioned if you create a new SPN, but don't remove an old SPN that overlaps or is the same, then you get duplicate SPN issue and Kerberos fails. ... >>> web services on a separate IIS server. ... >>> "the Wininet.dll file does not pass the port number of the target>>> Web ...
    (microsoft.public.inetserver.iis.security)
  • Re: NT AuthorizationAnonyomous logon error
    ... SQL BI Product Unit ... What I am doing now is creating a CAB file coping to the IIS ... >>> I have a SQL box and a IIS server. ... >>> Server and have place several cube that I wish client to access via a ...
    (microsoft.public.sqlserver.olap)
  • Re: another IIS Authentication
    ... > I have a IIS server that is NOT on our corporate domain. ... > I have half the users on workstations logging in to the ... If the server is not on your corporate domain then you can't authenticate ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS - SMTP - CDONTS
    ... > Hi Alan, ... Are all the messages queued in the IIS? ... I then checked the recipient's e-mail account and it did receive the ... > |> after you reinstall the IIS server. ...
    (microsoft.public.inetserver.iis)