| googlenews@claireandjoe.com 2005-08-30, 6:00 pm |
| Hi all,
Here is a post to help future searchers, but I also wanted to pose the
question to experts out there: Does anyone have a hardware load
balancing solution using integrated authentication in IIS 6.0?
We need Kerberos for one of our web applications over SSL. First you
login to https (that works fine), but then try to authenticate into the
application itself and it fails! The client can go to the actual IP
address of each individual server, it is only when you go to the
Virtual IP (VIP) it does not work! Microsoft told me it is due to a
"dual hop" problem, and that the best thing I can do is set up their
NLB (network-based load balancing) solution instead.
The solution they sent me on how to set this up is:
The problem:
http://support.microsoft.com/?id=325608
How to set up NLB with Kerberos authentication:
http://www.microsoft.com/technet/pr...ty/kerbnlb.mspx
How authentication works in IIS 6.0:
http://www.support.microsoft.com/?ID=264921
If anyone out there has gotten it working with any vendor (F5, Cisco,
Alteon, whatever) please reply and let me know!! At this point I won't
be satisfied unless Bill Gates himself calls to let me know it cannot
be done. 
Thanks,
Joe A.
|