Are you seeing 401’s too often for HTTP web requests?

We often hear concerns from our customers saying that they are seeing performance issues because of extra round trips being made to the Web server while requesting for web pages. Where they expected just one sequence of 401.2/401.1/200 (NTLM) or 401.2/200 (Kerberos) they are seeing the sequence more often for the subsequent page requests. They…

4

New features in SETSPN.EXE on Windows Server 2008

The version of Setspn.exe that came with Microsoft Windows Server 2000/2003 Support Tools did not have features to detect duplicate SPNs. The new version of Setspn.exe that comes bundled with Windows Server 2008 utilities has some really cool features. For someone dealing with the dreaded Kerberos authentication failure issues on a daily basis like me…

4

Service Principal Name (SPN) checklist for Kerberos authentication with IIS 7.0/7.5

In continuation to one of my earlier posts which focused on IIS 6.0 this post is more about the confusion that may arise around SPNs for setting up Kerberos authentication in IIS 7.0. IIS 7.0 has a new Kernel-mode authentication feature using which the ticket for the requested service is decrypted using Machine account (Local…

3

Who knows! You may be missing these points for Kerberos authentication failures for Web applications...

I am sharing here some of the general + elusive + ignored + must-have info that you may want to recheck when you are troubleshooting a kerberos cum delegation failure scenario and feel like reaching nowhere near the end of the tunnel (resolution!). These are my personal checklists based on experiences of troubleshooting kerberos related…

3

Kerberos troubleshooting from IIS perspective

Hi All, This is my first posting in the blog. I really had to take enough courage to start blogging, but with some help from one of my mentors in MS, I am finally here. I hope people really get benefitted from the articles that I post in here. Today, I am going to talk…

6