I want to create WebApplication in PowerShell (SharePoint 2013) with the recommended claims based authentication and using Kerberos (instead of default NTLM). Based on the documentation I used command that takes SPAuthenticationProvider as parameter to create claims based authentication and specify also authentication method to be Kerberos:
$ap = New-SPAuthenticationProvider New-SPWebApplication -Name "qwe1" -Host "qwe1" -Url "http://qwe1.blah.int" -Port 80 -ApplicationPoolAccount (Get-SPManagedAccount "DOMAIN\account") -ApplicationPool "qwe1" -AuthenticationProvider $ap -AuthenticationMethod "Kerberos"
The behavior is a bit strange - first, it issues warning:
WARNING: The Windows Classic authentication method is deprecated .. but creates WebApplication with claims based authentication. Second, the authentication method is NTLM, not Kerberos. Feels like Alice in Wonderland..