Kerberos on IIS

follow up to https://lwpro2.wordpress.com/2022/07/23/kerberos-authentication/, it turns out IIS (windows server) has authentication (either Kerberos or NLTM) baked in.

https://techcommunity.microsoft.com/t5/iis-support-blog/setting-up-kerberos-authentication-for-a-website-in-iis/ba-p/347882

and this is config for our server which worked out well with NLTM and single server (single HOST SPN)

then from server (python/java), retrieve the token of user and host:

Advertisement