Questions tagged [windows-authentication]

Integrated Windows Authentication is a term associated with Microsoft products that refers to the SPNEGO, Kerberos, and NTLM authentication protocols. Use tag with Windows authentication generally; though it might be best to use one of the more protocol-specific tags (such as Kerberos or NTLM) if the protocol being used is known.

Integrated Windows Authentication () is a term associated with Microsoft products that refers to the , , and authentication protocols with respect to functionality introduced with Microsoft Windows 2000 and included with later Windows NT-based operating systems. The term is used more commonly for the automatically authenticated connections between Microsoft Internet Information Services (), , and other aware applications.

IWA is also known by several names like HTTP Negotiate authentication, NT Authentication, NTLM Authentication, Domain authentication, Windows Integrated Authentication, Windows NT Challenge/Response authentication, or simply Windows Authentication.

Source: http://en.wikipedia.org/wiki/Integrated_Windows_Authentication

3028 questions
5
votes
1 answer

Where do I run the setspn command?

I am trying to add a Service Principal Name with the below command, which I am using for Windows Authentication. setspn –a HTTP/Kerberos.com domain\username I have a site running on IIS Server which is running on windows 2008 server connected to…
Kalpesh
  • 83
  • 2
  • 6
5
votes
2 answers

Getting User's Windows Username without Windows Authentication

We have an internal facing (C#/MVC/IIS7) application for which the requirement is for users to not have to enter credentials, but we need the network/Windows username to identify who the current user is. Is there any way to accomplish this? Thanks!
5
votes
0 answers

How to validate user's cached credentials against a domain?

When you logon to Windows, your credentials are cached. This allows you to use single sign-on. If you were to then browse to another computer, e.g.: \\hydrogen you would not be prompted for credentials. Windows will take your: current…
Ian Boyd
  • 246,734
  • 253
  • 869
  • 1,219
5
votes
3 answers

HowTo use Windows Authentication with MSSQL 2008+Delphi 7+ADO but users would still enter their password?

Does anybody know if it's possible to set up MSSQL 2008 to use Windows Authentication but users would still have to enter their windows password to log on (this would have to be accomplished by using Delphi 7+ADO)? [Edit]: Just to clarify, the …
macf00bar
  • 673
  • 1
  • 14
  • 32
5
votes
2 answers

SAML Identity Provider based on Active Directory

I have a 3rd party program that supports web SSO using SAML 1.1 (it is ready to serve as the Service Provider, in other words). We would like to implement this SSO for our intranet users based on their Active Directory credentials. In other…
Jarret
  • 51
  • 1
  • 1
  • 2
5
votes
1 answer

NegotiateStream rejecting clients that aren't local admins

I have a very basic client/server test set up that fails with the message: The server has rejected the client credentials. Unless the client is logged on as an account that has admin rights on the server. This is something I do not want. Here is…
joe_coolish
  • 7,201
  • 13
  • 64
  • 111
5
votes
3 answers

Windows Authentication and Network Service account as a db_owner

There is a number of commercial products out there, that give you a windows based installers for configuring your app and the back end SQL Server DB. Typically it will ask if you want to connect to the DB with Windows or SQL Server authentication.…
tstojecki
  • 1,480
  • 2
  • 19
  • 29
5
votes
1 answer

IE11 overrides Bearer authorization header in intranet environment

I'm encountering a pretty strange issue in IE11 where the browser is overriding the Authorization header in my requests even though I am setting it via AngularJS. Basically, I have an HTTP interceptor registered for all requests that looks like…
5
votes
1 answer

IIS7 and Authentication problems

i've got a stock standard ASP.NET web site, deployed to our development machine (internal machine in our server room). Now, this dev site can be accessed by both INTERNAL and EXTERNAL users. Now, in IIS6 we used to have it so that Anonymous…
5
votes
1 answer

WebAPI with Windows Authentication returns 401 unauthorized

I'm designing a WebAPI service which is going to have to use windows authentication against a client's AD servers. I'm trying to test this locally and am continually getting a 401 error, followed by the server just not allowing the request at all…
5
votes
2 answers

How to check whether a user belongs to an AD group and nested groups?

I have an ASP.NET 3.5 application using Windows Authentication and implementing our own RoleProvider. Problem is we want to restrict access to a set of pages to a few thousand users and rathern than inputing all of those one by one we found out they…
Intrigue
  • 672
  • 6
  • 15
5
votes
2 answers

Passing windows security token to an object that calls another webservice using NTLM and windows authentication

I have a web application that calls an object of a referenced dll/api that calls a wcf service. Machine 1 = where the wcf service resides Machine 2 = IIS server, the web application that uses the api that calls the service from Machine 1 My…
Maico
  • 171
  • 5
5
votes
1 answer

Authenticating angular for HTTP requests on MVC4 site using Windows Authentication

I am currently developing a website using AngularJS, and the application is meant to POST and GET data to and from an already running MVC4 application. This MVC4 application is using Windows Authentication. I can access the MVC4 application…
5
votes
0 answers

Windows Authentication Timeout IIS7

I am using Windows Authentication to assist in preventing access to a website. This site is not hosted within my network, meaning that the first time I try to access it I have to enter my windows credentials for that server. All this works great. My…
5
votes
4 answers

Windows Authentication behind AWS Elastic Load Balancer (ELB) not working

I have an ASP .NET MVC 5 site that uses Windows Authentication. The main page just displays the current Identity name (Controller.User.Identity.Name) for testing purposes. After deploying the website to the server (Windows Server 2012) and enabling…