Re: IIS to SQL Kerberos Delegation

From: pj_servadmin (pjservadmin_at_discussions.microsoft.com)
Date: 04/01/05

  • Next message: emde: "Re: Audit failed logins" 
    Date: Fri, 1 Apr 2005 07:09:01 -0800

    The KB article you mentioned relates Only to IIS 5.0, on Win 2k, of course. I
    was informed by support staff that the more correct articles to look at are:

    How the Kerberos Version 5 Authentication Protocol Works
    www.microsoft.com/Resources/Documentation/
    windowsserv/2003/all/techref/en-us/w2k3tr_kerb_how.asp

    Troubleshooting Kerberos Errors
    www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

    and finally, the most useful of all the Kerberos articles (note: this
    usually requires a few reads through to catch all the details):
    Troubleshooting Kerberos Delegation
    www.microsoft.com/technet/prodtechnol/
    windowsserver2003/technologies/security/tkerbdel.mspx

    Hope this helps!

    "news.microsoft.com" wrote:

    > Hi Mr. Kevin,
    >
    >
    >
    > Thanks for your helps, i want to ask a question about this article
    > http://support.microsoft.com/default.aspx?kbid=325608
    >
    > So, the problem delegation on NLB clusters still continue? And can we
    > delegate kerberos authentication only with .net windows Desktop application.
    > is the scenario is client application to SQL server ?
    >
    >
    >
    > "Kevin McDonnell [MSFT]" <kevmc@online.microsoft.com> wrote in message
    > news:wnLbliI3EHA.768@cpmsftngxa10.phx.gbl...
    > > Yes. Follow this article for some good advice and tips.
    > >
    > > 319723 INF: SQL Server 2000 Kerberos support including SQL Server virtual
    > > http://support.microsoft.com/?id=319723
    > >
    > > Thanks,
    > >
    > > Kevin McDonnell
    > > Microsoft Corporation
    > >
    > > This posting is provided AS IS with no warranties, and confers no rights.
    > >
    > >
    > >
    >
    >
    >

  • Next message: emde: "Re: Audit failed logins"

    Relevant Pages

    • Re: Cant get Impersonation / delegation to work
      ... the service needs to be trusted for delegation with "any protocol" ... app to Kerberos when you need to delegate to the back end. ... Make sure you have the proper SPN set on the account running the service ... allow connection to a remote SQL Server. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Access denied. delegation scenario accessing to a shared resource in cluster
      ... Depending on how your web server is configured ... for delegation, ... application via Kerberos too. ... web server and the cluster server and find out what kind of authentication ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: UNC Virtual Directories; NTFS permission authentication not ac
      ... If you want Kerberos delegation to work, you need to have everything setup correctly end-to-end. ... The browser must authenticate using Kerberos, which means that both IE must attempt Kerberos *and* the relevant server SPNs must be created/set correctly. ... > Windows Authentication option the ...
      (microsoft.public.inetserver.iis.security)
    • Re: Principal flowing and caching
      ... This is SO much easier to do with Windows auth. ... you just get Kerberos auth working and enable delegation and it ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Delegation through Linked Server Stops working
      ... "Troubleshooting Kerberos delation" is nearly a 90 page doc. ... you do when/if you open a ticket. ... This post was about delegation working and then suddenly ... delegation on linked server fails in our network when we use ...
      (microsoft.public.sqlserver.security)