IIS Server Security - Pass though authenticateion

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > July 2006 > Pass though authenticateion





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Pass though authenticateion
l3msip

2006-07-17, 7:23 am

Hi,

My Setup Server A is a W2003 server provinding sharepoint services. Using
ssl 128 bit ssl. Server B is my mail server providing 128bit ssl owa. When
Uses connect (externally) to server a they logon as expected but if they
cllick on a hyperlink to Server b OWA services they are propmeted again. I
want to avoid authentication.

Both servers are w2003 (server A is R2 though)

Server A Is set up like this Anon authentiaction = No
Integrated Auth = Yes
Basic Auth =No

Server B is Anon Auth = NO
Intergrated Auth =Yes
Basic Auth =yes

I do not want internal users having to log on to shrepoint (server A) hence
the Intergrated is set to Yes and Basic No.

Many Thanks peeps



Ken Schaefer

2006-07-17, 7:23 am

You will always have authentication (and authorization). Otherwise, how
would the OWA box know which mailbox to load for the user? The only question
is whether this happens transparently or not.

Whether the user's credentials are sent automatically or not is controlled
by the browser, not by the server. There are some "tricks" to get around
this (this is how Single Sign On products work).

See:
http://support.microsoft.com/?id=258063
for information on how IE decides whether to prompt the user for a password
or not

Cheers
Ken


"l3msip" <l3msip@discussions.microsoft.com> wrote in message
news:F2471BE0-F554-4F7B-940F-C8EDA43B09FC@microsoft.com...
> Hi,
>
> My Setup Server A is a W2003 server provinding sharepoint services. Using
> ssl 128 bit ssl. Server B is my mail server providing 128bit ssl owa. When
> Uses connect (externally) to server a they logon as expected but if they
> cllick on a hyperlink to Server b OWA services they are propmeted again. I
> want to avoid authentication.
>
> Both servers are w2003 (server A is R2 though)
>
> Server A Is set up like this Anon authentiaction = No
> Integrated Auth = Yes
> Basic Auth =No
>
> Server B is Anon Auth = NO
> Intergrated Auth =Yes
> Basic Auth =yes
>
> I do not want internal users having to log on to shrepoint (server A)
> hence
> the Intergrated is set to Yes and Basic No.
>
> Many Thanks peeps
>
>
>



l3msip

2006-07-17, 1:19 pm

Thanks (if i could figure a way of getting OWA onto a sharepoint
server..............)

Anyway adding it to the local Intranet sites works. Bit of a pain though for
users I guess.

Ta


"Ken Schaefer" wrote:

> You will always have authentication (and authorization). Otherwise, how
> would the OWA box know which mailbox to load for the user? The only question
> is whether this happens transparently or not.
>
> Whether the user's credentials are sent automatically or not is controlled
> by the browser, not by the server. There are some "tricks" to get around
> this (this is how Single Sign On products work).
>
> See:
> http://support.microsoft.com/?id=258063
> for information on how IE decides whether to prompt the user for a password
> or not
>
> Cheers
> Ken
>
>
> "l3msip" <l3msip@discussions.microsoft.com> wrote in message
> news:F2471BE0-F554-4F7B-940F-C8EDA43B09FC@microsoft.com...
>
>
>

Ken Schaefer

2006-07-18, 1:19 am

You can do this (add site to Intranet zone) via Group Policy object.

Cheers
Ken


"l3msip" <l3msip@discussions.microsoft.com> wrote in message
news:D0ADA026-7CAF-41D2-944E-7752D9C6FD4C@microsoft.com...[vbcol=seagreen]
> Thanks (if i could figure a way of getting OWA onto a sharepoint
> server..............)
>
> Anyway adding it to the local Intranet sites works. Bit of a pain though
> for
> users I guess.
>
> Ta
>
>
> "Ken Schaefer" wrote:
>


Lemon

2006-07-18, 7:27 am

True, but i was more concerned about home users and LAN users wont need OWA
anyway.

Ta for your help
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com