Authentication against a windows 2003 server

Hej

I'm using a network with a linux dhcp and dns server.

I need to implement authentication through Active Directory on a web
site. I have installed a windows 2003 server, and made the web
application authenticate against users in the servers Active Directory.
It all works perfectly.

Now I need to test NTLM (single sign on), ie. you log in on a windows
client (Windows Vista in this case), and you should then be logged in on
the web site without entering your username and password when you open
the browser. Therefore I need to authenticate vista against the windows
2003 server.

In the login box on Vista you, as I understand it, write "windows
domain"/"user name in AD" to log in, eg. mycompany.local/jonas. However
this doesn't work.

My question is where in Windows Vista you enter the address of the
windows server you want to authenticate against?

I have tried to enter the ip address of the windows2003 server as the
dns server, bit that doesn't change anything. I hope that some of you
have a suggestion.

Best Regards, Jonas

Howdie!

Jonas Nielsen schrieb:
> I need to implement authentication through Active Directory on a web
> site. I have installed a windows 2003 server, and made the web
> application authenticate against users in the servers Active Directory.
> It all works perfectly.
>
> Now I need to test NTLM (single sign on), ie. you log in on a windows
> client (Windows Vista in this case), and you should then be logged in on

Windows uses Kerberos by default. Is it Kerberos you want to test? NTLM?
Or just single-sign-on functionality?

> the web site without entering your username and password when you open
> the browser. Therefore I need to authenticate vista against the windows
> 2003 server.

Okay - where's the web application installed? On that Windows Server
2003? Are all those machines (Vista client, web server, DC) in the same
domain? How's DNS configured? Do clients use the DC as the primary DNS
source?

> In the login box on Vista you, as I understand it, write "windows
> domain"/"user name in AD" to log in, eg. mycompany.local/jonas. However
> this doesn't work.
>
> My question is where in Windows Vista you enter the address of the
> windows server you want to authenticate against?

You basically join it to the domain. That's about all.

> I have tried to enter the ip address of the windows2003 server as the
> dns server, bit that doesn't change anything. I hope that some of you
> have a suggestion.

So what is it, that you really want to test? What is the end goal?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.

Florian Frommherz [MVP] skrev:

> You basically join it to the domain. That's about all.

I wasn't aware that you should add the computer on the server. I mean,
you don't add the computer on the server when you use openldap.

> So what is it, that you really want to test? What is the end goal?

I have tried to rephrase the question in a new post. Feel free to ask if
you need specific details.