Share via

What can cause this exception on IIS and windows Server 2019. The HTTP request is unauthorized with client authentication scheme 'Negotiate'.

Anonymous
2024-03-06T08:21:20+00:00

What can cause this exception on IIS and windows Server 2019.

The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Negotiate,NTLM,Basic realm="???.za.ds.naspers.com"'.

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server 03RNB-DSVISINT1$. The target name used was HTTP/03rnb-dsvisint1.za.ds.naspers.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (za.ds.naspers.com) is different from the client domain (ZA.DS.NASPERS.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.

Windows for business | Windows Server | Performance | System performance

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-03-07T05:40:55+00:00

    Hello

    Thank you for posting in Microsoft Community forum.

    Based on the description, I understand your question is related to the IIS.

    Since there are no engineers dedicated to IIS in this forum. in order to be able to get a quick and effective handling of your issue, I recommend that you repost your question in the Q&A forum, where there will be a dedicated engineer to give you a professional and effective reply.

    Here is the link for Q&A forum.

    Questions - Microsoft Q&A

    Click the "Ask a Question" button in the upper right corner to post your question and select any related tag.

    Thank you for your understanding and support. If you have any question or concern, please feel free to let us know.

    Have a nice day.

    Best Regards,

    Molly

    0 comments