Blog Post

IIS Support Blog
5 MIN READ

Request based versus Session based Kerberos Authentication (or the AuthPersistNonNTLM parameter)

pcociuba's avatar
pcociuba
Icon for Microsoft rankMicrosoft
Oct 15, 2019
In this article, we will discuss how the AuthPersistNonNTLM authentication attribute affects Kerberos authentication to become a session or request based authentication protocol. Thus, we will be add...
Published Oct 15, 2019
Version 1.0
ethedy's avatar
ethedy
Copper Contributor
May 19, 2021

Hello! Excellent article. Indeed, I have a comment about the second interaction diagram (session-based kerberos) I think that, in the steps 5 and 6 the "Negotiate" and the "Ticket" does not conform the HTTP packet because the server responds in the last HTTP response with a header Persistent-Auth=true.

Please sorry if I am wrong...

 

Greetings from Argentina!

ET