Skip to content

Commit 92c5d15

Browse files
authored
Edit review
1 parent 19b71d0 commit 92c5d15

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

support/developer/webapps/iis/www-authentication-authorization/http-bad-request-response-kerberos.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -34,8 +34,7 @@ Decrease the number of Active Directory groups that the user is a member of.
3434

3535
Increase the settings for the `MaxFieldLength` and the `MaxRequestBytes` registry entries on the server so that the user's request headers don't exceed these values. To determine the appropriate settings, use the following calculations:
3636

37-
1. Calculate the size of the user's Kerberos token by using the formula described in the following article:
38-
[Problems with Kerberos authentication when a user belongs to many groups](../../../../windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups.md).
37+
1. Calculate the size of the user's Kerberos token by using the formula described in [Problems with Kerberos authentication when a user belongs to many groups](../../../../windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups.md).
3938

4039
2. Set the value of `MaxFieldLength` and `MaxRequestBytes` on the server to 4/3 * T bytes, where T is the user's token size in bytes. HTTP encodes the Kerberos token by using base64 encoding.
4140

@@ -48,7 +47,8 @@ Depending on your application environment, you might also work around this probl
4847

4948
By default, there is no `MaxFieldLength` registry entry. This entry specifies the maximum size limit of each HTTP request header. The `MaxRequestBytes` registry entry specifies the upper limit for the total size of the Request line and the headers. Typically, this registry entry is configured together with the `MaxRequestBytes` registry entry. If the `MaxRequestBytes` value is lower than the `MaxFieldLength` value, the `MaxFieldLength` value is adjusted. In large Active Directory environments, users may experience logon failures if the values for both these entries aren't set to a sufficiently high value.
5049

51-
For IIS versions shipped with Windows Server 2016 and later, the `MaxFieldLength` and `MaxRequestBytes` registry keys are located at the following sub key:
50+
For IIS versions shipped with Windows Server 2016 and later, the `MaxFieldLength` and `MaxRequestBytes` registry keys are located in the following subkey:
51+
5252
`HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters`
5353

5454
Set the key values as shown in the following table:
@@ -74,6 +74,6 @@ If `MaxFieldLength` is set to its maximum value of 64 KB, the `MaxTokenSize` reg
7474

7575
- [Http.sys registry settings for IIS](../iisadmin-service-inetinfo/httpsys-registry-windows.md)
7676

77-
- [Error logging in HTTP API](/windows/win32/http/error-logging-in-the-http-server-api)
77+
- [Error logging in the HTTP server API](/windows/win32/http/error-logging-in-the-http-server-api)
7878

7979
- [Problems with Kerberos authentication when a user belongs to many groups](../../../../windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups.md)

0 commit comments

Comments
 (0)