IIS / kerberos not prompting for credentials from Mac clients

authenticationiiskerberosmac

I have an IIS server (Server 2008R2/IIS 7.5) configured for kerberos authentication. The kerberos authentication works from clients on Windows (IE and Opera both tested), but when I access the site from any browser on a Mac (Safari, Chrome, or Firefox), I do not receive a username/password prompt.

When I visit other server also set up for kerberos authentication (set up and maintained by other people) from Mac, I do receive the prompt for a username/password.

Why would my server not request credentials for authentication? Is there a setting I should be checking?

Best Answer

Figured this out (and as it so often is, was a stupid thing).

Had to enable "Basic Authentication" so that IIS would request credentials if Integrated Auth failed.

For anyone reading this later, only do this on SSL enabled sites since Basic Auth is sent in cleartext.