Re: HttpWebRequest and 401

From: Charlie Nilsson [MSFT] (CharlieNilsson_CUTOUT__at_hotmail.com)
Date: 01/30/04 

Date: Fri, 30 Jan 2004 15:54:23 GMT

Right, Linux machines do not support NTLM natively (though Mozilla *was*
trying to get it to function properly, though I don't think they're working
on that anymore). I'm unaware of any method for getting your Linux
clients to send authentication info along with the HTTP request to IIS (or
respond with the user's correct Windows Domain credentials during challenge
/ response).
I'm afraid you'll have to re-think your security settings in IIS. 

--
CharlieN
VSU
This posting is provided "AS IS" with no warranties, and confers no rights.
Note: For the benefit of the community-at-large, all responses to this 
message are best directed to the newsgroup/thread from which they 
originated.  
--------------------
> From: linuxlivz@yahoo.com (LinuxLivz)
> Newsgroups: microsoft.public.dotnet.framework.aspnet.security
> Subject: Re: HttpWebRequest and 401
> Date: 29 Jan 2004 14:39:35 -0800
> Organization: http://groups.google.com
> Lines: 73
> Message-ID: <a5921448.0401291439.4f906760@posting.google.com>
> References: <a5921448.0401290635.240f1498@posting.google.com> 
<ngZS9Bp5DHA.1992@cpmsftngxa07.phx.gbl>
> NNTP-Posting-Host: 63.100.172.7
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: 8bit
> X-Trace: posting.google.com 1075415976 7022 127.0.0.1 (29 Jan 2004 
22:39:36 GMT)
> X-Complaints-To: groups-abuse@google.com
> NNTP-Posting-Date: Thu, 29 Jan 2004 22:39:36 +0000 (UTC)
> Path: 
cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!cpmsftngxa08.phx.gbl!cpmsftngxa06.
phx.gbl!cpmsftngxa09.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de
!t-online.de!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!postnews1.googl
e.com!not-for-mail
> Xref: cpmsftngxa07.phx.gbl 
microsoft.public.dotnet.framework.aspnet.security:8438
> X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
> 
> CharlieNilsson_CUTOUT_@hotmail.com (Charlie Nilsson [MSFT]) wrote in 
message news:<ngZS9Bp5DHA.1992@cpmsftngxa07.phx.gbl>...
> > I think you're confusing authentication types.
> > 
> > Read this msdn article, "IIS Authentication" on the subject or search 
> > online on msdn.     
> > 
ms-help://MS.VSCC.2003/MS.MSDNQTR.2003FEB.1033/vsent7/html/vxconIISAuthentic
> > ation.htm
> > 
> > At some point, you will need to gather authentication information from 
the 
> > user (i.e. they will have to enter a username / pwd).  Why use two 
servers 
> > when one will suffice?
> > 
> > 
> > --------------------------------------------------------------------
> > This reply is provided AS IS, without warranty (express or implied).
> > 
> > 
> > --------------------
> > >From: linuxlivz@yahoo.com (LinuxLivz)
> > >Newsgroups: microsoft.public.dotnet.framework.aspnet.security
> > >Subject: HttpWebRequest and 401
> > >Date: 29 Jan 2004 06:35:21 -0800
> > >Organization: http://groups.google.com
> > >Lines: 23
> > >Message-ID: <a5921448.0401290635.240f1498@posting.google.com>
> > >NNTP-Posting-Host: 63.100.172.7
> > >Content-Type: text/plain; charset=ISO-8859-1
> > >Content-Transfer-Encoding: 8bit
> > >X-Trace: posting.google.com 1075386921 4534 127.0.0.1 (29 Jan 2004 
> >  14:35:21 GMT)
> > >X-Complaints-To: groups-abuse@google.com
> > >NNTP-Posting-Date: Thu, 29 Jan 2004 14:35:21 +0000 (UTC)
> > >Path: 
> > 
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.su
> > 
l.t-online.de!t-online.de!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!po
> > stnews1.google.com!not-for-mail
> > >Xref: cpmsftngxa07.phx.gbl 
> >  microsoft.public.dotnet.framework.aspnet.security:8423
> > >X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
> > >
> > >Hello All
> > >Here is what I am attempting to do:
> > >
> > >I have a NTLM protected site. There are some users who are not part of
> > >the domain (visitors) get challenged with a Pop up dialog box
> > >prompting for a user id, pwd and domain.
> > >
> > >In oder to overcome this, I have setup a anonymous site (open to
> > >alll). Users would first hit this site contains a page with an
> > >instance of HttpWebRequest class. This class would make a call to the
> > >protected site with the user's credentials on behalf of the user. If
> > >the user has the correct credentials, then they would be passed to the
> > >protected site else they would be redirected to a login page (NOT the
> > >pop up dialog). In theory this appears to be a good idea to get rid of
> > >the po up dialog.
> > >
> > >However, I am unable to get the suers credentials on the anonymous
> > >site and pass it to the HttpWebRequest. If I use DefaultCredentials,
> > >then the site's user id and password are passed (IUSR_MACHINENAME). Is
> > >it possible to obtain the user credential on the anonymous site or is
> > >there another way to acoomplish this
> > >
> > >Thanks
> > >
> 
> 
> Thanks for your response. I understand auth types, NTLM works well for
> windows domain acounts, what about other OSes? The thinking is to
> perform auth without the annoyin pop-up dialog. I think, to condense
> the question, it would be can one make the auth pop up dialog go away
> if user is not in a Windows domain
> 
> Thaks
>

Relevant Pages

  • Re: Default credentials
    ... > comes up on my client site requires NTLM or Basic authentication? ... > a web browser - I assume it must be something they have set up ... If your receive a Dialog asking for your creds with NTLM auth ... credentials of the current security context. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Default credentials
    ... > comes up on my client site requires NTLM or Basic authentication? ... > a web browser - I assume it must be something they have set up ... If your receive a Dialog asking for your creds with NTLM auth ... credentials of the current security context. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Default credentials
    ... > comes up on my client site requires NTLM or Basic authentication? ... > a web browser - I assume it must be something they have set up ... If your receive a Dialog asking for your creds with NTLM auth ... credentials of the current security context. ...
    (microsoft.public.dotnet.security)
  • Re: re:Authentication Prompts in IE
    ... - My Deny rules don't require authentication. ... rules - anyone that has valid credentials can navigate).. ... - My ISA is not configured with 'Require Authentication For All users'. ... Because ISA is configured to only use NTLM, ...
    (microsoft.public.isa.clients)
  • Re: SSPI forward/delegate credentials
    ... > is host/hyade4.ifh.de in the Heimdal realm, or the Windows domain? ... It is the in the Heimdal realm: I have this session keys: ... after successful authentication I get an additional service/session ticket ... credentials to be forwarded. ...
    (microsoft.public.platformsdk.security)