Citrix

Archive: Web Interface Prompts for Credentials with Pass-Through Authentication and Using Fully Qualified Domain Name

  • CTX124022
  • Created On  Mar 15, 2010
  • Updated On  Mar 10, 2012
  • 3 found this helpful
  • Article
  • Topic : Authentication
This article is no longer maintained, its content refers to a discontinued product and may be out of date. Refer to the Discontinued Product Lifecycle or Active Citrix Product pages for more information on support schedules.

Summary

When connecting through Internet Explorer, users are prompted for credentials when connecting to a Web Interface site via Fully Qualified Domain Name (FQDN), even when the Web Interface site is configured for Pass-Through Authentication

Background

This authentication prompt appears at a time when Windows Integrated Authentication is attempting to authenticate the user. This action is between the Browser on the client device and IIS on the Web Server, no Citrix code is executing at this time.

Cause

A setting in Internet Explorer on the client operating system controls this behavior.

  1. In Internet Explorer 8, this setting is under Tools > Internet Options > Security. For the relevant security zone, select Custom Level, at the bottom of the list of settings.
  2. By default, the option Automatic Logon only in Intranet Zone is enabled. This option is the cause for the behavior observed – the Pass-through Authentication only is successful when accessing using a NetBIOS HostName, and not through FQDN.

  1. By enabling the option Automatic Logon with Current User Name and Password (as in the Screen shot above) then Windows Integrated Authentication is successful when accessing a Web Site using FQDN and Hostname.

More Information

Because this is a security related setting, such changes should only made when approved by the appropriate administrator or security team in your organization.

For more details, see Microsoft KB Article 303650 - http://support.microsoft.com/kb/303650

The following Microsoft TechNet article also contains further details regarding Internet Explorer - http://technet.microsoft.com/en-us/library/cc750035.aspx

More details on Windows Integrated Authentication is available here - http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/523ae943-5e6a-4200-9103-9808baa00157.mspx?mfr=true


Share your comments or find out more about this topic

Citrix Forums

Languages

N/A

| Terms of Use | Privacy | Governance