Microsoft KB Archive/321728

= Internet Explorer does not support Kerberos authentication with proxy servers =

Article ID: 321728

Article Last Modified on 2/8/2007

-

APPLIES TO


 * Microsoft Internet Explorer 5.5 Service Pack 1
 * Microsoft Internet Explorer 5.5 Service Pack 2
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-



This article was previously published under Q321728



SYMPTOMS
You cannot use Kerberos to authenticate with a proxy server (for example, Internet Security and Acceleration Server 2000) in Internet Explorer.



CAUSE
This behavior occurs because Internet Explorer does not support Kerberos authentication with a proxy, and does not respond to a negotiate challenge from a proxy server.



STATUS
This limitation was removed in Windows Internet Explorer 7.



MORE INFORMATION
If Integrated Windows Authentication is turned on in Internet Explorer for Windows 2000 and Windows XP, you can complete Kerberos authentication with Web servers either directly or through a proxy server. However, Internet Explorer cannot use Kerberos to authenticate with the proxy server itself.

NOTE: If Integrated Windows Authentication is turned on, Internet Explorer for Windows 2000 and Windows XP responds to a negotiate challenge and supports Kerberos authentication with Web servers. However, Internet Explorer for Windows 98, Windows 98 Second Edition, Windows Millennium Edition (Me), and Windows NT 4.0 cannot be configured to respond to a negotiate challenge. These versions of Internet Explorer default to NTLM (or Windows NT Challenge/Response) authentication even if the Enable Integrated Windows Authentication (requires restart) check box is selected because this feature is not available on these operating systems.

For additional information about how to turn on Integrated Windows Authentication in Internet Explorer 6.0, click the article number below to view the article in the Microsoft Knowledge Base:

299838 Unable to Negotiate Kerberos Authentication After Upgrading to Internet Explorer 6

Keywords: kberrmsg kbbug kbenv kbpending KB321728

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.