Re: Windows authentication from ASP.NET to SQL Server

Tech-Archive recommends: Fix windows errors by optimizing your registry

> If your ASP.NET app is configured for Integrated Windows security,
> credentials cannot be delegated
> by IIS to the remote database server w/o implementing Kerberos.
>
> The reason for this is that NTLM authenticates credentials under IIS
> Integrated Windows security so
> IIS never receives the credentials and cannot forward them for delegation.


But why can't I use Kerberos authentication? Is it anyway to force the
application to use Kerberos? The WindowsIdentity.AuthenticationType property
returns "Negotiate" - this should be "Kerberos", should it not?


Regards,
Nils Magnus Englund


.

Relevant Pages

  • Re: AD queries. Please, prove me being wrong...
    ... If you want to impersonate the authenticated user ... Kerberos delegation in AD to allow the web app to have the rights to ... delegate the user's credentials to AD. ... means that you must ensure that you use IWA auth in IIS and ensure that IWA ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Serializing credentials and reauthenticating. How?
    ... if your calling process is trusted for delegation with any protocol in AD ... In IIS, to get Kerberos you need to enable IWA auth and ensure the metabase ... We may go SSL/Basic from client to ALSB. ...
    (microsoft.public.dotnet.security)
  • Windows Authentication problem with IIS6 (Win2k3)
    ... I believe the problem to be something related to the Kerberos technology, ... Internet Information Services (IIS) ... Shouldn't integrated windows authentication use their ... Windows 2000) that talked about Kerberos and Delegation. ...
    (microsoft.public.inetserver.iis)
  • Windows Authentication problem with IIS6 (Win2k3)
    ... I believe the problem to be something related to the Kerberos technology, ... Internet Information Services (IIS) ... Shouldn't integrated windows authentication use their ... Windows 2000) that talked about Kerberos and Delegation. ...
    (microsoft.public.inetserver.iis.security)
  • Re: [modauthkerb] Negotiate on Windows with cross-realm trust ADand MIT Kereros.
    ... login to my OpenLDAP SASL based server and PostgreSQL with kerberos. ... Storing credentials in a krb5 cache pointing to KRB5CCNAME has nothing ... to do with delegation. ...
    (comp.protocols.kerberos)