Skip to content

Kerberos impersonation level 'impersonation' instead of 'delegation'. #29587

Description

Situation

I have a .NET Core CLI 2.2. or 3.0 preview5 client, that sends a REST request to an server, secured with Kerberos. The impersonation level should be "delegation", but only "impersonation" is achieved.

Problem

I cannot achieve delegation level with the .net core client from .NET Core 2.1 and up. It works on ** .NET Core 2.0**.

var handler = new HttpClientHandler();
handler.UseDefaultCredentials = true;

HttpClient httpClient = new HttpClient(handler) { BaseAddress = new Uri(baseUri) };
httpClient.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json"));

var response = await httpClient.GetAsync("");

var json = await response.Content.ReadAsStringAsync();

Metadata

Metadata

Assignees

No one assigned

    Labels

    area-System.Net.Securitybugin-prThere is an active PR which will close this issue when it is mergedtenet-compatibilityIncompatibility with previous versions or .NET Framework

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions