Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

How do I authenticate across multiple (AD) domains on IIS 6 using digest authentication? Is the domain that the server resides on the only authenticate-able domain?

share|improve this question

1 Answer 1

While MS documentation isnt particularly clear in this point, making some search we see on Autentification Methods on IIS:

  • It connects to a DC for validating the user and pass on both methods, but digest uses MD5 to send user and pass (¡Problem of security!)

So, if you look for integrated method, there's posts where explains that multidomain access is correct if you have a trust relationship between those domains. MultiDomain IIS

I think we can suppose that Multidomain works with digest method with trust relations between domains, based on MS info

Question: Can't you switch to integrated to use Kerberos and improve security? MD5 is quite easy to crack.

Hope this helps.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.