integrated auth not working in IE

[futurechan]

I have passport-windowsauth working in non-integrated mode. Now I am trying to get it working in integrated mode. I have WindowsAuthentication enabled on the site in IIS, and I have set the iisnode attribute promoteServerVars="LOGON_USER".

For Chrome and Firefox, when I hit the site, I get a login popup that is asking for windows credentials. When I supply them, it all works as expected.

In IE, I get the windows security popup, but when I enter my credentials, it rejects them.

Any idea why I am getting prompted for my credentials at all and why IE is rejecting them?

[jfromaniello]

that seems a problem between IE<->IIS, are you logged to the same domain?

[futurechan]

@jfromaniello I am remote and using a vpn, but I've had some other people test from within the office, and they are getting the same thing.

What's weird is Chrome and Firefox aren't having this problem.

[futurechan]

@jfromaniello I kinda wonder if this isn't the issue: http://blogs.msdn.com/b/ieinternals/archive/2011/07/06/integrated-windows-authentication-kerberos-ntlm-http-400-error-for-16kb-authorization-header.aspx

My suspicion is Chrome and Firefox fallback on ntlm while IE uses kerberos. I haven't had time to check it yet though.