Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>It seems likely you're a victim of the double-hop issue when using <a href="http://en.wikipedia.org/wiki/Integrated_Windows_Authentication" rel="nofollow">Integrated Windows Authentication</a> (IWA) and <a href="http://en.wikipedia.org/wiki/Kerberos_%28protocol%29" rel="nofollow">Kerberos</a>. The first hop is from your browser to the web application; the second hop is from your web application to the WCF service. </p> <p>Here are some resources that explain the issue more fully, and may offer a solution:</p> <ul> <li><a href="http://weblogs.asp.net/owscott/archive/2008/08/22/iis-windows-authentication-and-the-double-hop-issue.aspx" rel="nofollow">IIS, Windows Authentication and the Double Hop issue</a></li> <li><a href="http://www.codeproject.com/Articles/266515/Using-Integrated-Windows-Authentication-IWA-in-a-D" rel="nofollow">Using Integrated Windows Authentication (IWA) in a Distributed Application Architecture</a></li> <li><a href="http://blogs.technet.com/b/askds/archive/2008/06/13/understanding-kerberos-double-hop.aspx" rel="nofollow">Understanding Kerberos Double Hop</a></li> </ul> <p>You can configure Active Directory to support <a href="http://blogs.msdn.com/b/autz_auth_stuff/archive/2011/05/03/kerberos-delegation.aspx" rel="nofollow">Kerberos delegation</a> (usually the infrastructure guys don't like this), or you could turn off impersonation and use a "service" account for the web application and IIS app pool that can authenticate with the WCF service on behalf of the end user.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload