Why does Active Directory work with Visual Studio MVC templates when using IIS Express but not Kestrel?

Question

I see my AD name when I use IIS Express is

@User.Identity.Name

I switch to Kestrel and the name is blank ?

What happened to AD with Kestrel?

I've tried some fixes below but not quite sure I knew what I was doing

services.AddAuthentication(HttpSysDefaults.AuthenticationScheme);

 //.UseHttpSys(options =>
                //{
                //    options.Authentication.Schemes =
                //        AuthenticationSchemes.NTLM |
                //        AuthenticationSchemes.Negotiate;
                //    options.Authentication.AllowAnonymous = false;
                //})

score 1 · Answer 1 · answered Aug 19 '19 at 17:15

1

As documentation states in Configure Windows Authentication in ASP.NET Core:

Windows Authentication (also known as Negotiate, Kerberos, or NTLM authentication) can be configured for ASP.NET Core apps hosted with IIS or HTTP.sys.

So Kestrel just simply doesn't support Windows Authentication. You have two options: to host with IIS or HTTP.sys. Tu use 'HTTP.sys' you need this:

.UseHttpSys(options =>
{
    options.Authentication.Schemes = AuthenticationSchemes.NTLM | AuthenticationSchemes.Negotiate;
    options.Authentication.AllowAnonymous = false;
})

answered Aug 19 '19 at 17:15

Dmitry Pavlov

30,789
8
97
121

How does this relate to the settings in launchSettings.json ? I always thought the option were just IIS or Kestrel. – punkouter Aug 19 '19 at 17:52
This site can’t be reached The connection was reset. When I made the 2 changes needed for HTTP.SYS :( – punkouter Aug 19 '19 at 17:57
@punkouter I am not sure I understand what you are saying. Could you please clarify? – Dmitry Pavlov Aug 19 '19 at 18:07

score 0 · Answer 2 · answered Aug 19 '19 at 18:53

0

This may not help you now, but Windows Authentication with Kestrel (including on Linux and Mac) will be supported in ASP.NET Core 3, which you can read about here.

answered Aug 19 '19 at 18:53

Gabriel Luci

38,328
4
55
84

We will upgrade to v3 before its released so hopefully this makes my problem go away .. In the end we will use docker and I guess want to host in Kestral anyways – punkouter Aug 19 '19 at 19:20

Why does Active Directory work with Visual Studio MVC templates when using IIS Express but not Kestrel?

2 Answers2