Kerberos Does Not Negotiate Using Internet Explorer 5.5 If an FQDN Is Used to Connect

Article ID: 299270 - View products that this article applies to.
This article was previously published under Q299270
Expand all | Collapse all

SYMPTOMS

Kerberos authentication is not negotiated with Internet Explorer 5.5 or 5.5 Service Pack 1 (SP1) if a fully qualified domain name (FQDN) is used to connect to the Web server. This issue does not occur with Internet Explorer 5.01 or if the short (RDN) server name is used.
Back to the top | Give Feedback

CAUSE

This issue occurs because the Internet Explorer 5.5 code does not pass the right SPN when it calls the InitializeSecurityContext function.
Back to the top | Give Feedback

RESOLUTION

To resolve this problem, obtain the latest service pack for Internet Explorer 5.5. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
276369
(http://support.microsoft.com/kb/276369/EN-US/ )
How to Obtain the Latest Service Pack for Internet Explorer 5.5
Back to the top | Give Feedback

WORKAROUND

To work around this issue, do not connect using the FQDN with Internet Explorer 5.5 or 5.5 SP1 if you need Kerberos to be negotiated.
Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Internet Explorer 5.5 Service Pack 2.
Back to the top | Give Feedback

Properties

Article ID: 299270 - Last Review: May 8, 2003 - Revision: 2.0
APPLIES TO
  • Microsoft Internet Explorer 5.5, when used with:
    • Microsoft Windows 2000 Standard Edition
Keywords: 
kbfix kbprb KB299270
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top