I have a site on IIS6, that works with Windows Integrated Authentication, no anonymous.
When user browses to site first time by IP address, the site gets his credentials automatically (site is added to Local Intranet by IP, by machine name, and by FQDN). When I try to browse by IIS name (machine name or FQDN), the Internet explorer pops up login window and does not get the credentials the user enters manually. I want it to work automatically, like in case with IP.
It’s obvious I am missing something basic here, that has something to do with SPN, Kerberos etc. Can you point me to any article on the subject or tell me what is the problem?
Data, that may be helpful:
IIS Server, client machine, and user are members of the same domain.
Site runs classic ASP and .net
Site uses the pool with domain application user identity
When I do nslookup on the machine name, I get right response from DNS. The name is not in hosts file.
No SPN was defined for this service/app user/machine.
You must be logged in to reply to this topic.
Create a free account today to participate in forum conversations, comment on posts and more.