IIS Server Security - Domain authentication with FQDN in the URL

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2007 > Domain authentication with FQDN in the URL





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Domain authentication with FQDN in the URL
Vincent D.

2007-01-10, 1:17 pm

Hello,

I have a little problem with domain authentication on my SharePoint.
When I use my address https://computer/my_site/ , every client on my domain
can access the website without having to put its login & password. The
inconvenient is that my SSL certificate is for https://computer.mydomain/ so,
I have a little warning….
So when I use the URL https://computer/mydomain/my_site , I don’t have the
warning for the certificate, but I have to login manually with my login &
password from the domain 

Would you have any idea for not having any of these issues ?

Thanks in advance,
Regards,

Vincent

Daniel Crichton

2007-01-10, 1:17 pm

Vincent wrote on Wed, 10 Jan 2007 07:02:00 -0800:

> Hello,
>
> I have a little problem with domain authentication on my SharePoint.
> When I use my address https://computer/my_site/ , every client on my
> domain
> can access the website without having to put its login & password. The
> inconvenient is that my SSL certificate is for https://computer.mydomain/
> so,
> I have a little warning.
> So when I use the URL https://computer/mydomain/my_site , I dont have the
> warning for the certificate, but I have to login manually with my login &
> password from the domain ?
>
> Would you have any idea for not having any of these issues ?


This is a browser issue, not IIS.

However, there are two solutions I can think of.

(1) Replace the certificate with one that has a CN of computer so that it
matches the first URL.

(2) Adjust every client machine so that computer.mydomain is in the Trusted
Sites zone in Internet Explorer - this could be done via GPO for instance,
if they are all pulling policies from a centralised server.

Dan


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com