Quantcast
Viewing all articles
Browse latest Browse all 10469

Basic vs Negotiate Authentication.

Good Day. 

I am observing different behaviour on several client PCs; it looks like different versions of Ie. 

if a website is protected as follows  - what are the decision matrices used by IE to select either Basic or Negotiate, assuming it can do both ? 

I have some PCs on a domain,  W8+ie10 - uses basic,  W7+IE9 uses negotiate.  In all cases they are in Internet Sites with Integrated Authentication,   they do NOT have kerberos tickets for the domain being logged onto and we are using "Automatic Logon with Current User and Password".   It appears there is a setting or change in versions that forces IE to incorrectly select Negotiate when it should use basic.   

The question is, what has changed ?  I tried ETS tracing on WinInet but all it told me was it had selected Negotiate or Basic, but not WHY.   Second Question : is there tracing logic to see why it is picking one or the other ? 

HTTP/1.1 401 Unauthorized
Cache-Control: no-cache, no-store
Date: Mon, 29 Dec 2014 17:06:36 GMT
Pragma: no-cache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: 0
WWW-Authenticate: Negotiate
WWW-Authenticate: Basic realm="FOOREALM"
Proxy-Support: Session-Based-Authentication

thanks


Chris 


Viewing all articles
Browse latest Browse all 10469

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>