Return
-
Title
"400 Bad Request" when attempting to log into the Web Interface -
Description
HTTP error "400 Bad Request" is encountered when attempting to log into the Web Interface when Windows Authentication is enabled.
When Windows Authentication is disabled and Basic Authentication is enabled, logins are successful.
-
Cause
A large number of Active Directory Group memberships has increased the User's Kerberos token size beyond what the default settings will allow. -
Resolution
Follow the steps outlined in this TechNet solution.
A reboot of the IIS host machine is required in order for these configuration changes to come into effect.
-
Additional Information
This issue can be confirmed by checking the IIS logs located at C:\Windows\System32\LogFiles\HTTPERR The logs will show "HTTP 400 - Bad Request (Request Header too long)" A network capture will also show a similar message.