Browse by Tags

MaxUserPort - what it is, what it does, when it's important
11 March 08 05:17 PM | tristank | 0 Comments   
What can we say about MaxUserPort that hasn't already been said? Not a lot, it would seem. He's a beautiful dancer, perhaps? Ahh, such gentle humour, and nary a kitten drowned anywhere. But TCP port shenanigans are fairly frequently misunderstood, so Read More...
SetSPN improvements in Windows Server 2008! W00t!
21 December 07 05:21 PM | tristank | 0 Comments   
All this stuff is based on a prerelease (RC1) version of Windows Server 2008 and may change before final release. Cheques may not be honoured. I had a happy moment one night in India when the trainer for our IIS 7.0 TTT course discussed some of the Kerberos-related Read More...
401.3, you say? Not 403?
22 October 07 08:35 PM | tristank | 1 Comments   
You're running an IIS 6.0 website, and you have a virtual directory configured for anonymous authentication only (that is, you've un ticked Integrated Windows Authentication). Using a web browser, you try to access a file in that virtual directory. http://example.com/vdir/something.txt Read More...
KDC_ERR_BADOPTION when attempting constrained delegation
18 June 07 06:50 PM | tristank | 1 Comments   
Hit this earlier while working with someone else on a Kerberos delegation problem. All the SPNs looked right and were registered against the right accounts; all the App Pools were Network Service; from what I'd been told, everything should have been working... Read More...
Kerbi Wiki
12 April 07 05:35 PM | tristank | 1 Comments   
Back from another holiday (I call it the Arnold Rimmer technique) I've been trying to collect, rework and refurbish my thoughts on web-based Kerberos stuff in a personal Wiki. You're welcome to peruse it with the usual disclaimers that I'm frequently Read More...
DebugDiag 1.1 Released!
17 January 07 05:36 PM | tristank | 0 Comments   
IIS Troubleshooters rejoice! If you've ever had an application on an IIS server do one of the following, this tool is for you: - hang (or respond slowly) - crash (W3WP.exe terminated unexpectedly) - chew memory in the lead-up to a crash or need a restart Read More...
3 Simple Rules to Kerberos Authentication/Delegation SPNs
08 May 06 07:32 PM | tristank | 9 Comments   
The one where I try to boil Kerb down to three simple rules, and then decide that's probably impossible without sub-rules and perhaps a nine article series, and then get bored and go home. Read More...
Custom Password Filters
19 July 05 12:30 AM | tristank | 1 Comments   
Back from holiday now, and almost over the jetlag. Almost. A question came up today about Password Filter DLLs , and the documentation always seems to be hard to find, so I've popped up a quick summary of everything I know here. Back In The Day of NT4, Read More...
ISA 2004 does 502s rather than 407s if you're already authenticated
01 November 04 11:07 AM | tristank | 6 Comments   
There were a couple of newsgroup questions on ISA 2004 authentication that prompted me to go digging through the SDK. Edit: A little more background so this makes more sense: When an HTTP request is submitted by a client (also called a "user agent", because Read More...
Communities Blog Portal Now Open! With Keyword RSS Feeds!
10 July 04 12:16 PM | tristank | 2 Comments   
http://www.microsoft.com/communities/blogs/PortalHome.mspx Coolest feature: the ability to fashion a keyword/category query into an RSS feed across all Microsoft blogs. If you're only interested in certain things (and personalities be damned!), you can Read More...

Search

This Blog

Syndication

Page view tracker