kerberos and windows 2000

From: Adje (anonymous_at_discussions.microsoft.com)
Date: 02/26/04 

Date: Thu, 26 Feb 2004 05:53:50 -0800

Hi all,

i am using .NET remoting and i am hosting the remote
object in IIS to make use of the builtin Kerberos
authentication. How can i make sure that IIS uses the
Kerberos protocol in the negotiation process and that it
will *not* default to NTLM in case of an error.

Furthermore, i am using a network sniffer to check that
Kerberos is really being used. I expect to see network
traffic to the DNS and lsass between my client application
and server to exchange the tickets, but i dont see
anything like that. So to me it seems something goes wrong
and IIS defaults to NTLM authentication. Can someone show
me a way to prove that Kerberos is being used.

Thanks in advance,

Adje

Relevant Pages

  • Re: Windows Authentication problem with IIS6 (Win2k3)
    ... Authentication Protocol is Integrated ... Jeff - Thank you SOOOOO much - your suggestion to check out the IIS ... regardless of the IE setting regarding Enabling Integrated Windows ... >>I believe the problem to be something related to the Kerberos technology, ...
    (microsoft.public.inetserver.iis)
  • Re: Windows Authentication problem with IIS6 (Win2k3)
    ... Authentication Protocol is Integrated ... Jeff - Thank you SOOOOO much - your suggestion to check out the IIS ... regardless of the IE setting regarding Enabling Integrated Windows ... >>I believe the problem to be something related to the Kerberos technology, ...
    (microsoft.public.inetserver.iis.security)
  • Re: integrated vs basic
    ... I create an IIS site http://mysite and only set it up to use integrated ... > Integrated Windows Authentication actually involves two separate ... > The first currently means Kerberos, ... and generally firewalls block access ...
    (microsoft.public.inetserver.iis.security)
  • Re: integrated vs basic
    ... IIS Blog: www.adopenstatic.com/cs/blogs/ken/ ... :> Integrated Windows Authentication actually involves two separate ... :> The first currently means Kerberos, ... :> Kerberos doesn't work through most firewalls because in order to use ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Remote Content and Kerberos Delegation
    ... I'm almost certain it's Kerberos because the event log shows ... local content on the IIS web (eg a dummy.asp page which simply ... remote content during the same session. ... > authentication method that will send kerberos tokens. ...
    (microsoft.public.inetserver.asp.general)