IIS Server Security - Windows Integrated Authentication

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > March 2007 > Windows Integrated Authentication





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Windows Integrated Authentication
Wayne

2007-03-21, 7:24 am

Having a little problem with Windows Integrated Authentication on IIS 6 on
W2k3 Std SP1 and wondered if anyone has an idea as to what is wrong, as I
cannot find anything.

I have an IIS site with just one page, default.htm, as a test webserver.
This server will require secure access in the future when it goes into
production. When I enable WIA (no other authentication is enabled, no
annoymous access) any user that attempts to access it is asked for their
credentials.

All users are in the same domain as the IIS server.
All users have access to another IIS server that also uses WIA, but are not
asked for username and password when accessing that site - it just logs in
as you would expect it to.
All users use IE6 and have enable windows authentication ticked in IE.

Anyone have any ideas?

TIA

Wayne


Grant_S

2007-03-21, 7:20 pm

Is there maybe a difference in the application pool (identity settings / accounts) under which the application is runing in comparison with the server where all is functioning correctly?
Is there a web.config file that you can compare for the 'functioning' vs 'non-functioning' application [(allow / deny users or roles). Possibly, also, the application machine.config files if there are no application web.config files

From http://developmentnow.com/g/91_2007...hentication.htm

Posted via DevelopmentNow.com Groups
http://www.developmentnow.com
Wayne

2007-03-22, 1:24 am

Thanks for the response, I'll check it out.

Wayne

"Grant_S" <nospam@developmentnow.com> wrote in message
news:d063b5c3-b52e-40ba-b74a-034691e2e130@developmentnow.com...
> Is there maybe a difference in the application pool (identity settings /
> accounts) under which the application is runing in comparison with the
> server where all is functioning correctly?
> Is there a web.config file that you can compare for the 'functioning' vs
> 'non-functioning' application [(allow / deny users or roles). Possibly,
> also, the application machine.config files if there are no application
> web.config files
>
> From
> http://developmentnow.com/g/91_2007...hentication.htm
>
> Posted via DevelopmentNow.com Groups
> http://www.developmentnow.com



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com