Skip to content

Commit 3fdfc1c

Browse files
committed
fix links
1 parent 254de0e commit 3fdfc1c

1 file changed

Lines changed: 7 additions & 7 deletions

File tree

support/developer/webapps/iis/www-administration-management/http-bad-request-response-kerberos.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
---
22
title: HTTP 400 error responses to HTTP requests
33
description: Works around an HTTP 400 error that the HTTP request header is too long.
4-
ms.date: 05/14/2021
4+
ms.date: 01/10/2025
55
ms.custom: sap:WWW Authentication and Authorization\Windows Authentication
6-
ms.reviewer: ivanpash
6+
ms.reviewer: ivanpash, paulboc
77
---
88
# HTTP 400 Bad Request (Request Header too long) responses to HTTP requests
99

@@ -35,7 +35,7 @@ Decrease the number of Active Directory groups that the user is a member of.
3535
Increase the settings for the `MaxFieldLength` and the `MaxRequestBytes` registry entries on the server so that the user's request headers don't exceed these values. To determine the appropriate settings, use the following calculations:
3636

3737
1. Calculate the size of the user's Kerberos token by using the formula described in the following article:
38-
[Problems with Kerberos authentication when a user belongs to many groups](https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups).
38+
[Problems with Kerberos authentication when a user belongs to many groups](../../../../windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups.md).
3939

4040
2. Set the value of `MaxFieldLength` and `MaxRequestBytes` on the server to 4/3 * T bytes, where T is the user's token size in bytes. HTTP encodes the Kerberos token by using base64 encoding.
4141

@@ -68,12 +68,12 @@ Set the key values as shown in the following table:
6868
> [!IMPORTANT]
6969
> Changing these registry keys should be considered to be extremely dangerous. These keys allow larger HTTP packets to be sent to IIS. This, in turn, may cause Http.sys to use more memory. Therefore, such changes can increase the computer's vulnerability to malicious attacks.
7070
71-
If `MaxFieldLength` is set to its maximum value of 64 KB, the `MaxTokenSize` registry value should be set to 3/4 * 64 = 48 KB. For more information about the `MaxTokenSize` setting, see [Problems with Kerberos authentication when a user belongs to many groups](https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups).
71+
If `MaxFieldLength` is set to its maximum value of 64 KB, the `MaxTokenSize` registry value should be set to 3/4 * 64 = 48 KB. For more information about the `MaxTokenSize` setting, see [Problems with Kerberos authentication when a user belongs to many groups](../../../../windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups.md).
7272

7373
## References
7474

75-
- [Http.sys registry settings for IIS](https://learn.microsoft.com/en-us/troubleshoot/developer/webapps/iis/iisadmin-service-inetinfo/httpsys-registry-windows)
75+
- [Http.sys registry settings for IIS](../iisadmin-service-inetinfo/httpsys-registry-windows.md)
7676

77-
- [Error logging in HTTP API](https://learn.microsoft.com/en-us/windows/win32/http/error-logging-in-the-http-server-api)
77+
- [Error logging in HTTP API](/windows/win32/http/error-logging-in-the-http-server-api)
7878

79-
- [Problems with Kerberos authentication when a user belongs to many groups](https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups)
79+
- [Problems with Kerberos authentication when a user belongs to many groups](../../../../windows-server/windows-security/kerberos-authentication-problems-if-user-belongs-to-groups.md)

0 commit comments

Comments
 (0)