IIS Server Security - How do I skip the IIS authetication prompt with anonymous dissabled?

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > February 2006 > How do I skip the IIS authetication prompt with anonymous dissabled?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How do I skip the IIS authetication prompt with anonymous dissabled?
ian

2006-02-10, 5:53 pm

We have a product which runs on our website which requires that
Anonymous access not to be checked in IIS. It uses Basic or Integrated
Windows authentication.
We are also trying to create our own login screen for that product
where a user can enter his/her userid and password and bypass the Basic
authentication prompt.
Can I post that information from the form to IIS, bypassing the IIS
login prompt?
Can the authentication header that IIS creates when a user is
authenticated be created from our custom .net login page instead?

Tom Kaminski [MVP]

2006-02-10, 5:53 pm

"ian" <polenz_ian@yahoo.com> wrote in message
news:1139601088.103637.312250@z14g2000cwz.googlegroups.com...
> We have a product which runs on our website which requires that
> Anonymous access not to be checked in IIS. It uses Basic or Integrated
> Windows authentication.
> We are also trying to create our own login screen for that product
> where a user can enter his/her userid and password and bypass the Basic
> authentication prompt.
> Can I post that information from the form to IIS, bypassing the IIS
> login prompt?
> Can the authentication header that IIS creates when a user is
> authenticated be created from our custom .net login page instead?


If you're using your own custom auth then what's the point of denying
anonymous access (IIS auth)?

--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsser...ty/centers/iis/
http://mvp.support.microsoft.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS


ian

2006-02-10, 5:53 pm

We are taking a 3rd party application (no access to code) and we are
trying to provide a nice login screen. This product requires Basic or
Windows integrated authentication.. Therefore, we were hoping to
bypass the default IIS login by providing the required security object
to IIS from our form...

Ken Schaefer

2006-02-14, 2:49 am

See:
http://www.issociate.de/board/post/...on_Prompt?.html

Additionally, you can bypass the login prompt if your clients are using IE
and you can meet the following:
http://support.microsoft.com/?id=258063

Cheers
Ken


"ian" <polenz_ian@yahoo.com> wrote in message
news:1139607721.473897.132940@z14g2000cwz.googlegroups.com...
: We are taking a 3rd party application (no access to code) and we are
: trying to provide a nice login screen. This product requires Basic or
: Windows integrated authentication.. Therefore, we were hoping to
: bypass the default IIS login by providing the required security object
: to IIS from our form...
:


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com