|
Home > Archive > IIS Server Security > April 2004 > Authentication Issues
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Authentication Issues
|
|
| Nicodemas 2004-04-20, 5:34 am |
| I've have turned on Integrated Windows Authentication (and only this) for my entire site.
I have also granted the Everyone group on my domain Read + Read & Execute + List Folder Contents on my web site's root folder.
However, when I type in the URL to the site, I am still prompted for a username, password and domain.
Can anyone tell me what needs to happen here? Perhaps share permissions (though I don't think so...)?
| |
| Paul Lynch 2004-04-20, 6:34 am |
| On Tue, 20 Apr 2004 02:06:04 -0700, Nicodemas
<anonymous@discussions.microsoft.com> wrote:
>I've have turned on Integrated Windows Authentication (and only this) for my entire site.
>
>I have also granted the Everyone group on my domain Read + Read & Execute + List Folder Contents on my web site's root folder.
>
>However, when I type in the URL to the site, I am still prompted for a username, password and domain.
>
>Can anyone tell me what needs to happen here? Perhaps share permissions (though I don't think so...)?
>
Are you trying to access the site locally on an intranet or remotely
over the Internet ?
If the latter then you need to consider using a different
authentication method as Windows Integrated is intended primarily for
use in an intranet environment.
Refer to this KB article for more information :
INFO: How IIS Authenticates Browser Clients
http://support.microsoft.com/?id=264921
Regards,
Paul Lynch
MCSE
| |
| Nicodemas 2004-04-20, 6:34 am |
| It is my corporation's intranet.
| |
| Tom Kaminski [MVP] 2004-04-20, 8:37 am |
| "Nicodemas" <anonymous@discussions.microsoft.com> wrote in message
news:5C441D33-0B0F-4809-B3BD-EFA9384CB88C@microsoft.com...
> I've have turned on Integrated Windows Authentication (and only this) for
my entire site.
>
> I have also granted the Everyone group on my domain Read + Read & Execute
+ List Folder Contents on my web site's root folder.
>
> However, when I type in the URL to the site, I am still prompted for a
username, password and domain.
>
> Can anyone tell me what needs to happen here? Perhaps share permissions
(though I don't think so...)?
It's an IE config issue.
http://support.microsoft.com/?id=303650
--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsser...ty/centers/iis/
| |
| Nicodemas 2004-04-20, 12:36 pm |
| Mr. Kaminski,
I am doubtful of this IE issue, as my problem does not involve using the IP address or the FQDN to access the intranet web site. Administrators are able to access the site just fine through the methods I described above, which gives me a reason to believ
e it is just my permissions being screwy.
Even adding digest and basic authentication to the list of access controls has not helped. Also I even tested giving the Everyone group Full Control! Still no success.
Thank you all for your inputs, please keep them coming!
I'm working on a Windows 2000 Server machine with SP4 installed.
| |
| Ken Schaefer 2004-04-20, 12:36 pm |
| Hi,
You may wish to consult the following KB article:
http://support.microsoft.com/?id=258063
Internet Explorer May Prompt You for a Password
IE will never autologon using Basic or Digest Authentication. Autologon will
only occur when using IWA. Futhermore the sitename can not contain any "."
characters, otherwise it must manually be added to the IE Intranet zone.
Next, you say this works for admins, but not other users. That does imply
that everything is configured properly, but it's a permissions issue. If you
enter non-Admin credentials three times, what is the HTTP status code that
is displayed as a result? (it will be 401<something> )
It may very be that you are using ASP or something, and you are trying to
instantiate an object, or include a file, that only administrators have
permissions to.
Cheers
Ken
"Nicodemas" <anonymous@discussions.microsoft.com> wrote in message
news:9A53F90E-5DE7-4F3D-8E22-64A84FAF3197@microsoft.com...
: Mr. Kaminski,
:
: I am doubtful of this IE issue, as my problem does not involve using the
IP address or the FQDN to access the intranet web site. Administrators are
able to access the site just fine through the methods I described above,
which gives me a reason to believe it is just my permissions being screwy.
:
: Even adding digest and basic authentication to the list of access controls
has not helped. Also I even tested giving the Everyone group Full Control!
Still no success.
:
: Thank you all for your inputs, please keep them coming!
:
: I'm working on a Windows 2000 Server machine with SP4 installed.
| |
|
|
| I've have turned on Integrated Windows Authentication (and only this) for my entire site.
| I have also granted the Everyone group on my domain Read + Read & Execute + List Folder Contents on my web site's root folder.
| However, when I type in the URL to the site, I am still prompted for a username, password and domain.
| Can anyone tell me what needs to happen here? Perhaps share permissions (though I don't think so...)?
Your browser may be configured to always ask the user for credentials regardless of the IIS authentication method requested.
http://support.microsoft.com/?id=258063
-rwg
This is what I think, not necessarily what is accurate!
--------------------
| Thread-Topic: Authentication Issues
| thread-index: AcQmw0a0H0++Y5C+SLe5gD4iVBYVgQ==
| X-WN-Post: microsoft.public.inetserver.iis.security
| From: =?Utf-8?B?Tmljb2RlbWFz?= <anonymous@discussions.microsoft.com>
| References: <5C441D33-0B0F-4809-B3BD-EFA9384CB88C@microsoft.com> <fis980h3585ojbrfgsjdh95v83f80qmki1@4ax.com>
| Subject: Re: Authentication Issues
| Date: Tue, 20 Apr 2004 03:36:02 -0700
|
| It is my corporation's intranet.
|
|
|
|
|
|