An ticket (claims) based AuthN protocol

learn more… | top users | synonyms

36
votes
5answers
23k views

NTLM vs Kerberos

I just want to know the difference between NTLM and Kerberos. When to use NTLM and Kerberos and when not to use it? Why do you need to use Kerberos for authenticated feeds? Our admin is asking me why? ...
15
votes
0answers
580 views

SharePoint Hybrid Search Setup - Issues with Kerberos 3-Tier Farm

I'm having issues setting up the first leg of a Hybrid environment between my SP2013 Production On-Premise Farm with my SharePoint Online. It's a 3-Tier system with Kerberos authentication enabled, ...
12
votes
2answers
2k views

Identify Current Authentication Method Being Used

I am working on a solution that needs to act slightly differently if the incoming request is NTLM vs. Kerberos vs. ADFS, etc. Does anyone have an example of how to determine the incoming ...
8
votes
1answer
2k views

Passing a Kerberos Ticket to a web service

I'm trying to pass a Kerberos ticket onto a webservice through a custom webpart. The webservice is a WCF service, but it is a 3rd party web service that is not claims-aware. The web service doesn't ...
6
votes
4answers
7k views

How to setup Kerberos Constrained Delegation for SharePoint Excel Services and Analysis Services

This question is in continuation to MSOLAPSvc.3 service missing from kerberos delegation Target : To refresh a pivot table based out of a SSAS cube using Windows Authentication in the excel service ...
6
votes
1answer
3k views

Managed Metadata Service Application and Crazy Behavior

Good afternoon everyone. I've been working on the implementation of a SharePoint 2010 farm for over a week know, which is far longer than I should have been working on it. I'm running into a ...
5
votes
5answers
3k views

Authentication Defaulting back to NTLM not Kerberos

We have 3 servers. One running SQL and 2 running Sharepoint. Both Sharepoint servers are acting as WFE's using NLB. We have 2 Web Applications people.domain.local for our mysites and ...
4
votes
3answers
2k views

SharePoint 2010 Query service authentication problem

I am struggling with calling search.asmx service from asp.net page. I've created proxy class using svcutil.exe and run request using following code: var binding = new BasicHttpBinding(); ...
4
votes
3answers
4k views

Impersonation in a net.tcp WCF-service in a claims based/Kerberos solution

I have tried to keep this as short as possible, dont hesitate if you want more details. Im trying to get impersonation (of calling user) to work over a net.tcp WCF-Service in a Sharepoint ...
3
votes
4answers
8k views

Why does Kerberos authentication fail?

Running SharePoint 2010. I need to set up Kerberos authentication, since the double-hop problem with NTLM is causing trouble with a web part I am developing. Long story short, Kerberos authentication ...
3
votes
0answers
70 views

Logged as another user

UPDATE : I've totally disabled the Distributed Cache, however, the problem is still there. For the record, I've applied CU7 for AppFabric as well as SharePoint 2013 Server March '13 CU. No luck so ...
3
votes
1answer
227 views

Kerberos for multihop remoting powershell

I am trying to set up a remote powershell session to a sharepoint server in order to do remote management. I am running as a user with full mgmt rights at the sharepoint server If I use Credssp and ...
3
votes
1answer
639 views

SharePoint 2013 Kerberos Setup Issue - NT AUTHORITY\ANONYMOUS LOGON

Facing issues while configuring the Kerberos . The process is as below ASP.Net full trust farm solution deployed on SharePoint 2013 App Server (IIS 8) connects to SQL Server 2008 R2 Database 1. ...
3
votes
1answer
492 views

SharePoint 2013 authentification with Kerberos and Forms

We are currently using SP2010 with ADFS to implement the following scenario: [Internet]->ADFS with Webform->[SP2010]<-ADFS with Windows Auth<-[Internal Network] SharePoint has only one Url ...
2
votes
3answers
3k views

Duplicate SPNs for SharePoint hostname

I realise this might be a non SharePoint question but it might have been one that someone has encountered. I have a customer site that has a component (custom code) that use AD Kerberos delegation to ...
2
votes
2answers
489 views

NTLM or Kerberos for Intranet & Internet application in SharePoint 2010

NTLM or Kerberos.... which authentication is suitable for Intranet application? Internet application? Will answer differ if 3rd party tools are used? for MySite and ContentType Hub application ...
2
votes
2answers
1k views

No Double Hop on NTLM

I am trying to get a better understanding of Kerberos/NTLM in my setup. We have 2 WFE,1 backend and separate SQL cluster in domain1. The site has anonymous access enabled. We have another domain ...
2
votes
1answer
8k views

Planning for SPNs - what SPNs would I need?

I'm planning to set-up Kerberos in SharePoint 2013, but I'm unsure about the amount of SPNs I need. The farm I want to install is 3-tier: Server02: AD and KDC Server06: MSSQL Database Server ...
2
votes
1answer
1k views

Configure ADFS with Windows Authentication

I created an integration of an existing product that shows reports in web, comparable to Reporting Services. This product needs Windows Authentication or Kerberos/ asp.net impersonation to access ...
2
votes
1answer
245 views

MOSS 2007 on Windows Server 2008 behind ISA 2006 with smart card authorization

I am currently trying to upgrade my two WFEs from 32 bit Windows Server 2003 to 64 bit Windows Server 2008. I also have a 64 bit Windows server 2008 in the farm as an index server, and a 64 bit SQL ...
2
votes
1answer
313 views

SharePoint 2013 + Reporting Services + Kerberos

How to configure SharePoint 2013 with Reporting Services for delegations if I get data for Reporting Service from other SQL server that ShqrePoint database? I found below blog but I'm not sure about ...
2
votes
1answer
3k views

How do switch a SharePoint farm from NTLM to Kerberos

How do you switch a SharePoint farm / site collection from NTLM to Kerberos? It seems that there more to it than selecting Kerberos in: Central Administration > Application Management > ...
2
votes
0answers
28 views

SharePoint 2010 Kerberos Configuration Troubleshooter

Can someone say if it's possible to download fresh version of "SharePoint 2010 Kerberos Configuration Troubleshooter" utility? The problem I've got a program ...
2
votes
0answers
890 views

NullReferenceException on LogOut, LogInAsAnotherUser

After getting Kerberos working with Classic authentication, we're trying to switch to Kerberos & Claims-Based authentication. This seems to work with respect to logging in, but we get ...
2
votes
2answers
6k views

Why do I get a 401 error when calling a WCF service from a web part?

I have a SharePoint 2010 web part and WCF service deployed to a web application using Kerberos authentication. The service was developed based on the walkthrough from MSDN with the only difference ...
1
vote
2answers
3k views

Kerberos on Chrome, Safari or FireFox

recently enabled Kerberos on my SharePoint 2010 install. If I browse from IE, I see logins authenticate over Kerberos protocol. If I browse from any other browser (Chrome, Firefox, Safari..), NTLM ...
1
vote
2answers
185 views

What's the best authentication method if client won't give us access to their internal AD?

I have a provincial government client who we're deploying a SharePoint 2013 Standard farm. Because we're a 3rd party consultant they are reluctant to expose their AD and allow us to ADFS single-sign ...
1
vote
1answer
1k views

Kerberos and applicationhost.config

One of our WebApplications is using Kerberos. Our devloper has said that we need to edit the application.config and change: <windowsAuthentication enabled="true" useKernelMode="false"> to ...
1
vote
1answer
57 views

Kerberos - Farm Account

I have to configure Kerberos for PerformancePoint and I have one farm account for all services in test farm. I need add delagtion for Performance Account. Can I use Farm account to set spn as below ...
1
vote
1answer
40 views

How to require Kerberos authentication on SharePoint?

I have created an Active Directory Domain Controller-integrated SharePoint site on Azure using the new Create SharePoint Farm feature. I want to change it to require Kerberos. Does anyone know how ...
1
vote
1answer
62 views

Which service account to use for Kerberos in out-of-the-box SharePoint?

I just installed SharePoint2013 Enterprise on Windows 7. Now trying to set up Kerberos authentication, following this guide. PROBLEM: What is "serviceaccount"? In this context: 2.2 Next, list ...
1
vote
1answer
3k views

SP2013 won't use Kerberos - but C2WTSTest passes fine?

I'm setting up a new SharePoint 2013 farm using Kerberos authentication. I've read a ton of resources about it and it seems I've got my solution 99% right - Kerberos is working like a charm when I ...
1
vote
2answers
2k views

Connection to external data source using windows authentication (NTLM)

I'm trying to connect to an external SQL server DB programmatically from a SharePoint WebPart. The problem is that I'm not able to authenticate to the DB although I gave access to application pool ...
1
vote
1answer
152 views

Mount moss 2007 web application content database(NTLM) on 2010 web application with Negotiate (Kerberos) authentication provider

Can I mount a MOSS 2007 web application content database with NTLM authentication provider on 2010 web application with Negotiate (Kerberos) authentication provider? Will I face any issues?
1
vote
1answer
3k views

sharePoint 2010 User Profile Syncronization - Not Starting.. Libutils.cpp Cannot find the file specified

Brand new SP2010 install patched up to August 2011 CU. Used wizard to install everything. Attempt to start User Profile Synchronization, but it just reads "starting". I have another install on ...
1
vote
1answer
45 views

Configuring SPNs for SharePoint 2010

I am working with a SharePoint 2010 set up operating in Classic mode and consisting of four servers: Web server Application server SQL server SQL reporting server The SharePoint application pools ...
1
vote
0answers
248 views

Sharepoint Kerberos and… search?

I'm troubleshooting some kerberos issues with Sharepoint and turned on kerberos logging. I'm getting - +++ A Kerberos Error Message was received: on logon session Client Time: Server Time: ...
1
vote
1answer
103 views

Kerberos + SharePoint

Kerberos - the beast of SharePoint - has been configured and is creating tickets on my test environment WFE. I also had RevertToSelf for the BCS service application turned on. I am able to create an ...
1
vote
1answer
117 views

SSRS Intermittant Exceptions

Someone assisted me this morning with one issue related to Reporting Services in SharePoint Integrated mode: SharePoint Reporting Services - NLB issue Now I seem to have another issue. The post ...
1
vote
1answer
990 views

Powerpivot data refresh over kerberos delegation

I have a SQL 2008 R2 OLAP Cube and an Excel file that uses powerpivot and embedded datasource to the Cube. I want to upload the Excel file in SharePoint and allow users who are authenticated to the ...
1
vote
0answers
209 views

Accessing client side office application in Kerberos enabled environment

I have recently implemented Kerberos in my farm on a very basic level, the need for it was to resolve issues with MAC OS clients so that they would not have to log in each time they hit one of the ...
1
vote
1answer
3k views

MSOLAPSvc.3 service missing from kerberos delegation

I'm trying to configure PerformancePoint using this article and Analysis Services is running and configured on that box, but the constrained delegation won't let me choose the MSOLAPSvc.3 service ...
1
vote
1answer
1k views

Aliasing the SQL Server name

I'm creating a new SP 2010 farm that will replace our existing 2007 farm (using the db attach method), and decided I should probably use SQL aliasing with this install. So 2 questions relating to ...
0
votes
1answer
3k views

How to create WebApplication with claims based authentication using Kerberos in PowerShell in SP2013

I want to create WebApplication in PowerShell (SharePoint 2013) with the recommended claims based authentication and using Kerberos (instead of default NTLM). Based on the documentation I used command ...
0
votes
1answer
205 views

NetBIOS name of Web Application

This may be a no brainier to some, but i'm stumped and can't get a straight answer as to what the netBIOS name of a web application would be. Is it the same as my host header i created for the web ...
0
votes
1answer
12 views

Configuring Kerberos with Host-Named Site Collections

So I created a Single Web Application: rootsite.contoso.com with a Root Site Collection. I set the Authentication in the Web App to use Kerberos and then Set the SPN for the AppPool account running ...
0
votes
2answers
36 views

Kerberos for Central Administration

So I am at the moment trying to setup kerberos authentication for the central administration of sharepoint. I did already get it to work for normal site collections where it works without any problem. ...
0
votes
1answer
103 views

SharePoint 2013 Kerberos IE: 'Page Cannot be displayed' externally

I have a client with set up with Kerberos authentication. Inside their network it works beautifully. It's a 4 server farm: 2 WFEs behind a load balancer (kemp), 1 App/CA server, 1 Office Web services ...
0
votes
1answer
649 views

SharePoint Self Hosted apps - Kerberos Authentication

From this article its clear that SharePoint self hosted apps doesn't support Kerberos authentication unless "it is configured to use NTLM as a fallback authentication method" Could any one be able to ...
0
votes
1answer
920 views

Kerberos- Why create SPN with NetBIOS and FQDN?

I've setup Kerberos in my farm and things seem to be running right, i'm coming across articles that talk about registering the NetBIOS names of my webapps however and i'm curious as to why i would ...