Windows authentication through a reverse proxy problem

Question

Have a IIS Reverse proxy redirect on specific request on WebSite with windows authentication and impersonation to another local site with win.auth + impersonation.

Reverse proxy and the web application placed on a different machines and iis versions (proxy- IIS 7.5 , webApp IIS6) and the same domain.

Requests through the reverse proxy does not allow the user to be authenticated on the remote server. has an infinite authentication request.

jeremy-george · Accepted Answer · 2011-09-28 12:41:21Z

1

This is inherent to the way windows authentication (NTLM) works: the password is never sent, authentication is done with a salted hash of the password, so the first server can authenticate the user but cannot re-use those credentials to impersonate the same user on a remote server (since without the password it cannot authenticate).
Look at this blog post to get more information about this problem (which is known as "double-hop problem").

answered Sep 28, 2011 at 12:41

jeremy-george

1,2511 gold badge10 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Jim G. Over a year ago

Link is broken.

Collectives™ on Stack Overflow

Windows authentication through a reverse proxy problem

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related