From: jordanrieger on
Just further to the question of what it means when Response.Write
Request.ServerVariables("AUTH_TYPE") returns
"Neogtiate", as I understand it, according to this article (http://
support.microsoft.com/kb/314404), it means authentication was used
successfuly. However, the type of authentication can only be
determined by the length of the HTTP_Authorization header: "Typically,
NTLM yields a 150 - 300 byte header, while Kerberos is more like 5000
bytes."

The length of the header in my case was 218 bytes, indicating I am
using NTML as opposed to Kerberos. Whether this is good or bad, I
have no idea. The article seems to indicate that Kerberos is
necessary to preserve the user's credentials when chaining HTTP
requests from one IIS server to another using ServerXMLHttp, but I
don't think they are saying it is necessary if you are just accessing
a shared file directly without going through HTTP.