3

I just installed IE 8 and I am now unable to authenticate with my SharePoint 2007 site using Integrated Authentication. I have no problems, however, connecting with Firefox using the exact same user account.

Thinking my problem might be related to IE 8 permissions, I added the site to the list of intranet sites. After this did not resolve the problem, I also reconfigured the security level to low for the intranet zone. I'm still unable to authenticate.

Interestingly enough, I'm able to connect to the Central Admin site using the same browser. Furthermore, as I previously mentioned, I have no problem connecting using Firefox. Both Central Admin and my development site are configured for Integrated Windows Authentication in IIS.

I've gone through the advanced settings in IE one-by-one and I haven't been able to figure out what's preventing me from authenticating with my SharePoint site using IE 8.

I thank you in advance for any information.

senfo
  • 315
  • 1
  • 3
  • 12

3 Answers3

5

In the process of updating to IE8, is there any chance you were bitten by the loopback bug that's been frustrating so many of us? A relatively recent security update has been wreaking the sort of havoc you describe:

http://support.microsoft.com/kb/896861

This isn't going to affect sites running on high ports (e.g., your Central Admin site's default zone), but it will affect port 80 traffic looping back to the local machine.

The impact of this issue has been growing. In all cases I've encountered, setting the DisableLoopbackCheck DWORD (followed by a reboot) solves the problem.

Hope this helps!

Sean P. McDonough
  • 786
  • 4
  • 6
2

Make sure IE8 Intranet mode is turned on. In addition I would check to see if "Enable Integrated Windows Authentication" is turned on under the advanced tab.

If you are able, I would also take a look at using Fiddler to verify what is being sent across the wire to the SharePoint site.

Aaron Weiker
  • 686
  • 1
  • 5
  • 10
  • Thank you for the response. Both Intranet Mode and Integrated Windows Authentication are enabled. – senfo Jun 26 '09 at 18:08
  • A few more Windows updates are being applied. As soon as they are completed, I'll check the Fiddler output. – senfo Jun 26 '09 at 18:09
  • Are you going through a proxy server at all? – Aaron Weiker Jun 26 '09 at 18:12
  • Unfortunately, no. There are no proxies configured. – senfo Jun 26 '09 at 18:18
  • I reviewed the request headers and I definitely see the NTLM authorization going out: Authorization: NTLM TlRM............. – senfo Jun 26 '09 at 18:22
  • If you look in IIS, what are the authentication types that are allowed for that site? Are they the same as what is on the Central Administration site? – Aaron Weiker Jun 26 '09 at 18:25
  • It's identical (as far as I can tell) to Central Admin. Both have just Integrated Windows authentication checked. – senfo Jun 26 '09 at 18:29
  • Did you look in the IIS logs to see what is being reported? If you are running IIS7 you can do request tracing to see what is happening. This could provide some insight. – Aaron Weiker Jun 26 '09 at 18:34
  • Is it all IE8 browsers, or just yours? – Aaron Weiker Jun 26 '09 at 18:35
  • I tried IE8 on the host machine and I have no problem connecting. It's really strange. I'm with you on that simple thing. I hate those! I'm just running out of ideas! Since it works with Firefox and a remote IE8 instance, I'm pretty sure I can rule out IIS configuration, but I've done everything I can think of in IE! – senfo Jun 26 '09 at 18:39
  • So the issue is only with a local IE8? What version of moss are you running (patch level)? Also, what is your OS patch level? – Aaron Weiker Jun 26 '09 at 19:32
  • Just talked to ta collegue, he pointed me to this KB 926642. http://support.microsoft.com/kb/926642/ – Aaron Weiker Jun 26 '09 at 19:34
2

Make sure you have SharePoint 2007 SP2 installed, that is the only version that supports IE8.

Jeff
  • 1,018
  • 1
  • 10
  • 14