Re: Integrated Windows Authentication

What is your point?

You previous asked:

register a SPN:
setspn –A http/<ipaddress> <application pool Account>
now,does Internet Explore use Kerberos Authentication?

The answer to this question is that registering an SPN does not make IE use/attempt Kerberos AuthN. The browser must think that the website is in the Intranet security zone to attempt Kerberos AuthN. Otherwise it uses NTLM instead.

The KB article is talking about enabling IE auto-logon feature. Auto-logon has nothing to do with NTLM -vs- Kerberos. Autologon can work with either of these two authN mechanisms.

Cheers
Ken


"vx" <vx@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:AAEBCCEF-DDA1-4963-8525-C9E7C9CB8027@xxxxxxxxxxxxxxxx
http://support.microsoft.com/kb/258063
This article does not refer to Kerberos Authentication


.

Relevant Pages

  • Re: Kerberos interoperablity with import NT4 users and WRQ Reflections
    ... The WRQ Reflections program has a problem with the Kerberos authentication ... when you use it to access a Unix host. ... > in the userAccountControl field of the Active Directory. ...
    (microsoft.public.win2000.active_directory)
  • Re: kerberos 5.0 and apache 1.3.34
    ... My kerberos authentication i think is working now ... i say 'i think' because when i check my http header response this is ... I have apache 1.3.34 running on a ubuntu linux box. ...
    (comp.protocols.kerberos)
  • Re: Kerberos and Group membership
    ... Has anyone used Kerberos in Windows 2000\2003 server environment? ... "Active Directory" is basically a KDC and an LDAP server. ... doing Kerberos authentication to W2K or Windows 2003? ...
    (comp.protocols.kerberos)
  • Re: Windows authentication query
    ... trusts) cannot be authenticated by Kerberos due to the absence of a common ... > Kerberos Authentication works find with FQDN. ... a client on the internet would not be able to connect ... >: over an intranet). ...
    (microsoft.public.inetserver.iis.security)
  • RE: Activesync HTTP_500
    ... One of the main causes of the HTTP_500 error is if Kerberos authentication ... From a command prompt on the Exchange 2000 computer, ... WSS but its best not to have WSS installed on an Exchange Server. ...
    (microsoft.public.exchange.clients)