IIS Server Security - Solved: asp request data lost

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > December 2004 > Solved: asp request data lost





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Solved: asp request data lost
Markus

2004-12-02, 8:17 am

Hi,

as posted before we had the strange behaviour, that when posting data
within an intranet application from one asp page to another the
request data (formfields, ...) was lost.

Conditions, under which the problem occurs:
* Server: Windows Server 2003 with IIS 6.0
* Web-Authentication: anonymous; integrated windows auth. deactivated
* Client: Windows XP professional SP2, IE 6.0
* Access the web via it's intranet name (http://SERVERNAME/login.asp)
=> no data is posted when posting this page e.g. to a login check page

Steps to solve the problem:
* Access the web via DNS name (e.g.:
http://intranet.CUSTOMERNAME.com/login.asp)

It must have something todo with (mixed) authentication, which seems
to be treeted in a differend way from Windows XP SP2. If we accessed
the web from a Windows 2000 client, or an xp client without SP2
everything worked fin, the request data was posted correctly.

br
Markus
David Wang [Msft]

2004-12-07, 2:49 am

Yes, your problem is with mixed authentication.

The solution by using a dotted server name must be forcing IE to assume NTLM
is NOT available -- which fixes your mixed authentication issue by removing
one of the "mixed" authentictation.

The issue has always been solved by either:
1. Use uniform authentication on the server
2. Somehow disable/turn-off the client-side "optimization" that fails in
mixed authentication

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Markus" <markus.unterauer@maintec.at> wrote in message
news:d5260042.0412020402.40d7ac9f@posting.google.com...
Hi,

as posted before we had the strange behaviour, that when posting data
within an intranet application from one asp page to another the
request data (formfields, ...) was lost.

Conditions, under which the problem occurs:
* Server: Windows Server 2003 with IIS 6.0
* Web-Authentication: anonymous; integrated windows auth. deactivated
* Client: Windows XP professional SP2, IE 6.0
* Access the web via it's intranet name (http://SERVERNAME/login.asp)
=> no data is posted when posting this page e.g. to a login check page

Steps to solve the problem:
* Access the web via DNS name (e.g.:
http://intranet.CUSTOMERNAME.com/login.asp)

It must have something todo with (mixed) authentication, which seems
to be treeted in a differend way from Windows XP SP2. If we accessed
the web from a Windows 2000 client, or an xp client without SP2
everything worked fin, the request data was posted correctly.

br
Markus


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com