IIS Server Security - Unable to reverse back to NTLM

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > February 2004 > Unable to reverse back to NTLM





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Unable to reverse back to NTLM
KL Wong

2004-02-23, 7:34 pm

I am running IIS6 on a Window 2003 server. Have set NTLM as the
authentication method, and the userid/password/domain prompt comes up
nicely when try to access the virtual directory. Then we got an error
402.1 when internet users try to access our web, hence I change it to
'basic authentication' to see if it relates to the authentication
method, and yes it is.

When I try to change the authentication from basic back to NTLM, the
userid/password/domain prompts dont come up any more. How do I know
whether it is running NTLM or Basic authentication now !!

Any help most appreciated. B.Rgds/KL
Ken Schaefer

2004-02-24, 1:34 pm

In your browser, is there an option to "remember your username and password"
for this site? Perhaps the user ticked that box, and the browser is
auto-logging in?

You can test to see what's happening by using telnet:
c:\>telnet
telnet>open www.yoursite.com 80

GET / HTTP/1.1
HOST: www.yoursite.com
[enter]
[enter]

Since you are not providing any credentials, the server should send back a
403, with the WWW-AUTHENTICATE headers after that.

Cheers
Ken


"KL Wong" <klwong@swire.com.au> wrote in message
news:5e65d905.0402240057.27153f97@posting.google.com...
: I am running IIS6 on a Window 2003 server. Have set NTLM as the
: authentication method, and the userid/password/domain prompt comes up
: nicely when try to access the virtual directory. Then we got an error
: 402.1 when internet users try to access our web, hence I change it to
: 'basic authentication' to see if it relates to the authentication
: method, and yes it is.
:
: When I try to change the authentication from basic back to NTLM, the
: userid/password/domain prompts dont come up any more. How do I know
: whether it is running NTLM or Basic authentication now !!
:
: Any help most appreciated. B.Rgds/KL


Bernard

2004-02-25, 9:40 am

402.1 ? should be 401.2 right ?

and refer this kb on how IIS authenticates clients.
INFO: How IIS Authenticates Browser Clients
http://support.microsoft.com/?id=264921

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...


"KL Wong" <klwong@swire.com.au> wrote in message
news:5e65d905.0402240057.27153f97@posting.google.com...
> I am running IIS6 on a Window 2003 server. Have set NTLM as the
> authentication method, and the userid/password/domain prompt comes up
> nicely when try to access the virtual directory. Then we got an error
> 402.1 when internet users try to access our web, hence I change it to
> 'basic authentication' to see if it relates to the authentication
> method, and yes it is.
>
> When I try to change the authentication from basic back to NTLM, the
> userid/password/domain prompts dont come up any more. How do I know
> whether it is running NTLM or Basic authentication now !!
>
> Any help most appreciated. B.Rgds/KL



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com