[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 319
  • Last Modified:

Why does Kerberos Authentication work -- When it shouldn't?

I've read a lot about the Kerberos protocol and lately some about Kerberos authentication in SharePoint, how you must configure this and that (SPN) to make it work.

So now I've taken time to test this, and guess what -- Kerberos authentication works fine without SPNs etc. I configure web applications to use classic or claims-based authentication, but there is not difference from when configure them to use NTLM.

I've been iisresetting, restarting, loggin in and out, using several web apps, different accounts, etc, etc, using web parts with links and such to other web apps and so forth, accessed the site from different machines, etc, but I cannot have the site not functioning properly for me.

(This is a virtual Active Directory environment with Windows Server 2008 R2 and Windows 7 machines, and SharePoint Server 2010 SP1.)

What am I doing wrong, I just can't get this Kerberos authentication to not work.  ;-)
0
Jack_A_Roe
Asked:
Jack_A_Roe
  • 2
  • 2
1 Solution
 
Paul JacksonCommented:
Where is your sharepoint server installed on a separate machine or on the WIndows server 2008 R2. You only need to setup delegation and spns if the sharepoint server is installed on a separate machine or one that is not a Domain Controller.
0
 
Jack_A_RoeAuthor Commented:
Thank you for your comment.

There is basically three machines in this environment: 1 DC, 1 WFE w. SQL, and 1 client. Both servers are Windows Server 2008 R2, SharePoint version is SharePoint Server 2010, SQL is Microsoft SQL Server 2008 R2, and the client is Windows 7. Internet Explorer is 8 on servers and 9 on client.
0
 
Paul JacksonCommented:
OK because your WFE and SQL are on the same machine you don't run into the 'double hop' problem which requires the setup of delegation and SPNs, if your SQL was on a separate machine to the WFE you would need it.
0
 
Jack_A_RoeAuthor Commented:
Oh, darn! - Thank you very much, jacko72!  :-)
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now