Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Would there be any situation where you would choose NTLM over Kerberos for a Sharepoint 2010 farm?

The sites will use claims based auth, Internal users & content editors will authenticate against a separate AD (one way trust).

If you need more info please ask and I can provide more information.

Thanks in advance.

share|improve this question

1 Answer 1

up vote 5 down vote accepted

Kerberos is required if you are going to use certain features like SQL Server Reporting Services, Outlook Web Access, Performance Point, etc where the user's request to SharePoint has to be be forwarded to a subsequent system; a process known as "the double hop".

If the system is set for Kerberos it will fall back to NTLM if Kerberos cannot be used.

To answer your question, why would you select NTLM versus Kerberos? I have seen some diabolical issues when the various apps are not setup perfectly. I have seen experienced IT people super stressed out over it. If you don't have somebody qualified to do it, and you don't have the requirements for it, then I would select NTLM.

On a separate note, relevant to your environment, I have recently heard of a documented issue involving Kerberos with Claims Auth, but I have not gotten all of the specifics yet as to the scenario.

share|improve this answer
    
@MikeOryszak Thanks for the response, as you say it falls back to ntlm anyway so there seems nothing to lose! I forgot to mention that there is a large possibility of dynamics integration in the future which would lend itself to the kerberos solution –  redsquare Oct 1 '10 at 8:03
    
@redsquare - don't forget to mark this as the answer if you are satisfied that this answers the question, by hitting the check (tick) mark. Only the original poster of the question can do this. Thanks. –  SPDoctor Nov 15 '11 at 10:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.