Re: Integrated Windows Authentication
- From: "Ken Schaefer" <kenREMOVE@xxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 21 Mar 2008 14:37:57 +1100
Hi,
Registering an SPN isn't the issue here. The issue is that when Internet Explorer see an address http://IPaddress it does not attempt Kerberos authentication. This is because it believes that the site is located in the Internet security zone. internet explorer only attempts Kerberos authentication for sites in the "Intranet" security zone.
Check my blog for a series of posts on IIS and Kerberos and what you need to do to get this all working end-to-end.
Cheers
Ken
--
My IIS blog: http://adopenstatic.com/blog
"vx" <vx@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:018CA32B-02C0-4E81-AABA-EF6EA25F16EF@xxxxxxxxxxxxxxxx
The user and the server running IIS are members of, or are trusted by, the
same domain.
And IIS configed to use Integrated Windows Authentication.
Does Internet Explorer prompt the user for credentials (user name and
password) ,and use NTLM Authentication, When
user access the website using IP Address in an LAN?
register a SPN:
setspn –A http/<ipaddress> <application pool Account>
now,does Internet Explore use Kerberos Authentication?
Why can we access Server service using \\ipaddress without register SPN?
.
- Prev by Date: (IIS) problems with virtual directory
- Next by Date: Re: Digest does not work when integraded is turned on. ONLY on non-AD machines.
- Previous by thread: (IIS) problems with virtual directory
- Next by thread: Re: Integrated Windows Authentication
- Index(es):
Relevant Pages
|
