Hi, I have Kerberos authentication turned on for one of our internal web sites. I have fulfilled all of the prerequisites (SPN, IE integrated authentication, and correct security zone) When I try to authenticate to the site from a widows server 2003 machine the authentication works fine. I have also...

Okay, I enabled kerberos logging as per this article: http://support.microsoft.com/?kbid=262177 There's now a couple of kerberos error messages in my event log, I don't know if they were caused by IIS or not. Error Code: 0xd KDC_ERR_BADOPTION and Error Code: 0xd KDC_ERR_BADOPTION. I'll have...

We have the most strange situation here when IE7 clients try to authenticate on an IIS6-based intranet application. I hope somebody can help me explain. Our .asp application is running in domain "belgium.local". Integrated Windows authentication works fine for users in that domain. Users in...

Hi, I am having problems trying to work out if it is possible to share iis session timouts accross web applications in the following scenario: - In my environment there are 2 IIS Web Servers on the same network domain. One of the servers will host a .NET web application. The other will host a COTS document...

I have a well running 3-tier web application in a Windows 2003 domain. The Internet-Explorer Clients call aspx-pages ont he webserver. The webserver then performs a DCOM call to a document management server using impersonation. It all works fine using only aspx pages. Checking the thread principal before...

I have 2 network names. 1 for the cluster and one for the file server resource. When I configure the account, that runs app pools on my nlb, to delegate to the host and cif's service(cluster attached to san), I use the file server name(b/c that's what I specify in IIS file location), right? The...

If I have multiple app pools on a server, and SPN's created for each website(ie: setspn -a http\webapp1.example.com domain\account, and setspn -a http\webapp2.....), Will kerberos still work? I thought I read a while back the I can only have one account that all the app pools would run as or force...

I have nlb groups and multiple sites(each site has own application pool). I would like to have one account that all the app pools run under. I couldn't get kerberos working(necessary for remote file-share webroot) using the machine accounts but I was able to with a user account. Do I need to do this...

I have 2 iis 6.0 boxes load balanced and the web files are located on a san that is shared by two clustered file servers. I'm trying to stay away from the "connect as" scenario so that I may leverage my ntfs permissions. In AD, I checked the "trust for delegation" check box for...

I have two domains in separate forests with a two-way non-transitive trust, a resource domain and a user domain. The resource domain hosts an application and only allows certain users in the user domain to access it. There is an application tier that hosts a web service that the user credentials need...