Re: SPNEGO seems to work on Windows !!!

From: Serassio Guido <guido.serassio@dont-contact.us>
Date: Tue, 18 Oct 2005 09:13:38 +0200

Hi Henrik,

At 01.07 18/10/2005, Henrik Nordstrom wrote:

>On Mon, 17 Oct 2005, Serassio Guido wrote:
>
>>Another hypothesis:
>>
>>Currently Internet Explorer doesn't support Negotiate for Proxy
>>Auth, so I have used Firefox 1.5 beta 2. I don't know how its
>>Negotiate implementation is fully correct.
>
>To get MSIE happy you only need to run Squid as a reverse proxy..
>

Right ... :-)

>And why they don't implement Negotiate for proxy connections
>completely beats me. Big mystery. How does MSIE authenticate with
>ISA server as a proxy in a pure AD environment? Is that even possible?

It uses NTLM ....

May be that IE 7 implements it, I will do a check.

Just for an example: when using Windows Cluster, the authentication
against a cluster virtual node can be NTLM only.

When Microsoft released Windows 2000, they say "No more Netbios/NTLM
is needed with Windows 2000". Some year after, releasing Windows
2003, "Netbios/NTLM is not needed with Windows 2003", now in the
Longhorn features i can read:
"No more Netbios/NTLM is needed with Longhorn" .....

No comment.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Tue Oct 18 2005 - 01:13:42 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Nov 01 2005 - 12:00:07 MST