Hi All,
we run into an issue with the Digest Authentification on IIS.
Settings:
Server 2008 R2
IIS 7.5
Anonymous Authentification: Disabled
ASP.NET Impersonation: Enabled
Basic Authentification: Disabled
Digest Authentification: Enabled
Forms Authentification: Disabled
Windows Authentification: Enabled
When a user visits the site with a valid Kerberos Ticket he immediately gets a login prompt (Digest).
It seems like that Kerberos isn't even used to authentificate. If we turn off Digest the user gets authorized with its kerberos-ticket and authentification worked fine. But in our scenario later we are in need of Digest authentification to use a WSS-Service with a service account.
So my question is, is there a way to adjust the order of the authentification methods in iis (7.5) so that the Kerberos Ticket gets used withoud the need of the Digest prompt? Or do you see any obvious reasen why this could not work? We tried to sort the methods in the applicationhost.config without success.
Any help in the right direction is appreciated.
Kind regards
Dieter