Tell me more ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.
up vote 2 down vote favorite

I have a public Internet facing site running on SHarePoint 2010 using NTLM authentication. Users using FireFox/Chrome/Safari are able to log into the site using just their username and password. Internet Explorer users, however, are forced to log in with domain\username. If the domain is left out the site will not grant the user access.

I have been instructing users to try to use another browser but most of our user base uses IE. We have two separate domains. Internal users belong to DomainA and External users are in DomainB. I am not sure why IE is forcing the inclusion of the domain in the username while the others do not. I need users to be able to log in with just username and password only. Has anyone seen this before? Thanks!

share|improve this question
Does this affect all IE users, i.e., those accessing the site from inside the company firewall as well as from outside or is it limited to one group? – Dave Wise Jul 12 '11 at 18:34
This affects all IE users both internal and external – Mike B Jul 12 '11 at 22:01

2 Answers

up vote 1 down vote

A Couple of things you can try:

  1. In internet explorer, uncheck the "Enable Integrated Windows Authentication" box in the security options page.

    This doesn't actually disable it, it just forces NTLM. When the checkbox is clicked it will try to use Kerberos first, than it is supposed to fall back to NTLM (IE7+).

  2. I would also suggest loading up fiddler and comparing the authentication headers when you use the other browsers with the one generated by IE.

Does this happen to both internal (users on same domain as server) and external (trusted domain)? How are the authentication option in the WebApp configured (IIS settings)?

share|improve this answer
This happens for all IE users in both the trusted and the domain the web server exists on. We actually did switch from NTLM to kerberos in order to use forms based authentication. The IIS Settings for authentication have both forms based (HTTP 302 login/redirect) and windows(http 401 challenge) authentication enabled. I will run the fiddler trace and make a comparison. THanks! – Mike B Jul 12 '11 at 22:10
I'm not sure I'm following you, Kerberos and FBA are two different authentication methods, independent of each other. You may want to try and switch back to NTLM. – Jesus Shelby Jul 13 '11 at 12:37
up vote 0 down vote

We had the same problem, but as it turns out our clients are in a different domain than our sharepoint server. When authentication takes place, the client computer implicitly sends your complete authentication information, i.e. your domain\username and password. When the authentication request arrives at the server, it realizes the user doesn't belong the same domain as it does. Consider configuring a trust between your domain for transparent authentication. Greetings.

share|improve this answer
Thanks for the response. The external users are on DomainB which is the same domain as the Sharepoint server. There is also a one way trust between DomainA and DomainB where DomainB trusts DomainA. ALso, This only happens in internet Explorer. This does not happen in FireFox, Chrome, or Safari – Mike B Jul 11 '11 at 22:56

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.