locked
Kerberos SPN registration and IIS (Integrated Windows Authentication) RRS feed

  • Question

  • We are experiencing a slow first response for authentication to the IIS 7.0 when we have out application folder called 'MORS' secured with Integrated Windows Authentication where Kerberos is enforced. Out setspn records point to two servers

    HTTP/server1.domain.com

    HTTP/server2.domain.com

    Is it possible that we get delays because there are two servers with IIS deployed and having two SPN records in the Active Directory database? Instead of 2-3 seconds, we get 1-2 minutes response after the first 401 response for authentication. then the 200 response arrives, but very late.

    How to troubleshoot this? It is not application related!

    Thanks

    Monday, December 19, 2011 8:14 PM

All replies