TFS 2010 Kerberos Falls Back to NTLM When Using FQDN

kerberosteam-foundation-server

We have a Team Foundation Server 2010 set up using Kerberos. If we're accessing it via http://tfsserver:8080/tfs, everything's fine and users were never prompted for credentials. However if accessing it via http://tfsserver.domain.com:8080/tfs, then IE prompts for credentials. Has anyone experienced a similar issue? Thanks!

I tried IE, Firefox and Chrome and got the same result (Kerberos when using machine name, NTLM when using FQDN).

Best Answer

First thing to check on your client that the fqdn is in the Trusted Sites zone, and the Trusted Sites zone is configured to "Automatic logon with current username and password".

I would also be inclined to create an SPN for the url if it does not exist:

http/tfsserver.domain.com:8080

You can show the spn's like this:

setspn.exe -L tfsserver.domain.com
setspn.exe -L tfsserver.domain.com:8080
setspn.exe -L tfsserver
setspn.exe -L tfsserver:8080

Related Topic