Application uses NTLM instead of Kerberos
The portal opens, but NTLM is observed instead of the expected Kerberos. Does working mean the design is correct?
This evidence consists of synthetic examples created for teaching.
Evidence
Client
Connection address is portal-alias.iyelabs.example.Uygulama
Windows integrated authentication; NTLM is allowed in the example.Service identity
The service runs under the IYELABS\svc_portal account.Envanter
The requested HTTP/portal-alias.iyelabs.example name is not present in the expected account mapping.Question
What is the best next assessment?