Kerberos Authentication using 2 domain accounts RRS feed

  • Question

  • I am trying to connect to SQL through IIS using impersonation on IIS as a single logon.  I have a domain service account in SQL and defined SPN with MSSQLSvc/xsql.dom.net   dom\serv_act.  I also have IIS application pool defined using a domain service account (serv_actIIS) and defined SPN with HTTP/xIIS.dom.net  dom\serv_actIIS.  Also Delegation set for serv_actIIS account with MSSQLSvc/xsql.dom.net. IIS displays windows logon form.  In IIS I do not have window form enabled. It is set to use Windows Authentication and ASP.NET impersonation is enabled.   Does can some one help me...


    Friday, May 3, 2013 3:15 PM

All replies

  • What does this mean?

    >IIS displays windows logon form

    IIS is an HTTP server, and so doesn't display anything.

    What happens if you provide credentials in the logon form?

    You'll need to get windows authentication to IIS working before attempting the delegation.


    David http://blogs.msdn.com/b/dbrowne/

    Friday, May 3, 2013 4:14 PM
  • Ok,, I get a logon form to enter user credentials.  entering credentials still get logon form....

    Friday, May 3, 2013 4:49 PM