Internet Explorer Does Not Support Kerberos Authentication With Proxy Servers (321728)


The information in this article applies to:

  • Microsoft Internet Explorer 5.5 for Windows 2000 SP 1
  • Microsoft Internet Explorer 5.5 for Windows 2000 SP 2
  • Microsoft Internet Explorer 5.01 for Windows 2000 SP 1
  • Microsoft Internet Explorer 5.01 for Windows 2000 SP 2
  • Microsoft Internet Explorer version 6 for Windows XP
  • Microsoft Internet Explorer version 6 for Windows 2000
  • Microsoft Internet Security and Acceleration Server 2000
This article was previously published under Q321728

SYMPTOMS

You cannot use Kerberos to authenticate with a proxy server (for example, Internet Security and Acceleration Server 2000) in Internet Explorer.

CAUSE

This behavior occurs because Internet Explorer does not support Kerberos authentication with a proxy, and does not respond to a negotiate challenge from a proxy server.

STATUS

This behavior is by design.

MORE INFORMATION

If Integrated Windows Authentication is turned on in Internet Explorer for Windows 2000 and Windows XP, you can complete Kerberos authentication with Web servers either directly or through a proxy server. However, Internet Explorer cannot use Kerberos to authenticate with the proxy server itself.

NOTE: If Integrated Windows Authentication is turned on, Internet Explorer for Windows 2000 and Windows XP responds to a negotiate challenge and supports Kerberos authentication with Web servers. However, Internet Explorer for Windows 98, Windows 98 Second Edition, Windows Millennium Edition (Me), and Windows NT 4.0 cannot be configured to respond to a negotiate challenge. These versions of Internet Explorer default to NTLM (or Windows NT Challenge/Response) authentication even if the Enable Integrated Windows Authentication (requires restart) check box is selected because this feature is not available on these operating systems.

For additional information about how to turn on Integrated Windows Authentication in Internet Explorer 6.0, click the article number below to view the article in the Microsoft Knowledge Base:

299838 Unable to Negotiate Kerberos Authentication After Upgrading to Internet Explorer 6

Modification Type:MinorLast Reviewed:9/14/2006
Keywords:kbbug kbenv kberrmsg kbpending KB321728
©2004 Microsoft Corporation. All rights reserved.