Windows Server 2008 R2 Thread, IIS7 Kerberos/NTLM authentication problem in Technical; We've got our intranet site running on IIS7, we have authentication enabled so that only staff can see the staff ...
11th September 2012, 09:30 AM #1
IIS7 Kerberos/NTLM authentication problem
We've got our intranet site running on IIS7, we have authentication enabled so that only staff can see the staff page and students, the students page. Our primary school site, which is a seperate domain, with a trust, which runs over a wireless link, has been added appropriately to the permissions of the sites, but the loading performance at the primary site is very very poor. It takes minutes to load the pages. We've tried doing the ntlm non auth persist thing, which i think has made a small difference, but it's very little difference.
11th September 2012, 09:35 AM #2
NTLM is not an efficient protocol. For every single object retrieved, you'll see a deny, a challenge and an authentication response in your logs if you have full logging enabled. I've had a world of hurt getting Kerberos and NTLM working through Squid on Linux, but I digress.
Kerberos is a much more effiecient protocol, network wise.
For troubleshooting, get the 'Firebug' extension loaded up into Firefox on your clients and see what this says. I'm quite sure it will narrow down the problem.
11th September 2012, 09:45 AM #3
We've tried that, removing the kernel mode auth, then selecting negotiate - kerberos, in the security means it prompts for username and password, so not quite what we had in mind... we are trying to fix that now :S
11th September 2012, 09:51 AM #4
Close the browser, kill existing Kerberos tickets with the command klist purge, then retry the browser.
Originally Posted by Oaktech
By Stefletch in forum Office Software
Last Post: 10th February 2007, 10:00 AM
By pooley in forum Wireless Networks
Last Post: 20th July 2006, 05:44 PM
Last Post: 29th June 2006, 02:00 PM
Last Post: 24th May 2006, 06:23 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)