Determining the Authentication Method with Internet Information Services 5.0

• Microsoft Internet Information Services version 5.0

SUMMARY

When you use Windows Integrated authentication with Internet Information Services 5.0, either Kerberos authentication or NTLM (Windows NT Challenge/Response) authentication may be used. Due to differences in the two authentication methods (for example, NTLM does not provide support for delegation), you may need to specify which authentication method is used.

MORE INFORMATION

If you check the authentication method being used by the browser, or use the server variable "AUTH_METHOD," it will simply return "Negotiate" as the method used to log on the user. To specify the difference, you can look at a network trace for the size of the HTTP_Authorization header. Typically, NTLM yields around a 150-byte to 300-byte header, while Kerberos generally yields around a 5,000-byte header.

Additional query words: iis kerberos digest security negotiate

Keywords :
Version : winnt:5.0
Platform : winnt
Issue type : kbinfo