Avoiding NTLM challenge prompts

From: fooshen (fooshen2000_at_yahoo.com)
Date: 06/25/03 

Date: 25 Jun 2003 03:24:42 -0700

Hi,

I'm having trouble with multiple NTLM login prompts with my
applications.
Let me explain the situation:

I have an asp.net application, hosted in WebServer1, with only Windows
Authentication selected in IIS for the application. A page in the
application has an iframe to another asp.net application, hosted in
WebServer2.

Both applications has <authentication mode="Windows" /> set in
Web.Config, and both servers are in the same Windows 2000 Domain.

When a user logs in to a client machine (win2k pro) using a local
login (not domain login), whenever the page is accessed, there will be
two prompts for password (first from WebServer1, and next from
WebServer2 because the iframe is accessing a page in WebServer2).

Is it possible, to bypass the second prompt? If the user has
identified him/herself in the first challenge, can I pass the
credential to the second server? I am looking at Kerberos Delegation
and also using NetworkCredential class, though I am not clear what I
should do about it. Any help and pointers is very much appreciated!
Thanks in advance,

-fooshen.

Relevant Pages

  • Re: Avoiding NTLM challenge prompts
    ... enable delegation on specific account. ... > I have an asp.net application, hosted in WebServer1, with only Windows ... > login, whenever the page is accessed, there will be ... > two prompts for password (first from WebServer1, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Unable to login to OWA from a Win98 PC
    ... Login to server via https: login prompts for user name, password, domain ... Next get prompt that says about to display secure and non-secure items. ...
    (microsoft.public.exchange.admin)
  • Re: Plain truth is that unix/linux is NOT secure!
    ... DECServers) with students leaving behind programs that faked the login ... prompts with a failed attempt each time thus capturing the passwords ... The users are trained that the _only_ way to login is to hit the Break key. ... Hydrogen is not the most plentiful element in the universe, ...
    (comp.os.vms)
  • Cannot Login to OWA
    ... When I attempt to login to my Exchange 5.5 OWA account I am prompted to enter ... Logging into my mailbox with the administrator username and password and ... When I login with the an incorrect password, after it prompts me 3 times, ...
    (microsoft.public.exchange.admin)
  • Re: Plain truth is that unix/linux is NOT secure!
    ... DECServers) with students leaving behind programs that faked the login ... prompts with a failed attempt each time thus capturing the passwords ... The users are trained that the _only_ way to login is to hit the Break key. ... are not tempted to do anything other than hit break to log in. ...
    (comp.os.vms)