Re: Authentication Redirect to login doesn't work

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 06/28/05 

Date: Tue, 28 Jun 2005 14:07:05 -0700

Hello Eric,

so what do you want to do? basic or forms auth.

If you are using windows/basic auth in IIS - IIS will do the authentication
- the client will get a login dialog

If you are doing forms, you set IIS to do no authentication - and do it yourself
in ASP.NET by providing a custom login page.

In the case of forms - you also have to set ACLs in web.config - like

<authorization>
  <deny users="?" />
</authorization>

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hi Dominick,
>
> For both basic and window authentication test i disabled in IIS all
> authentication options except the one concerned by the test. Basic for
> basic auth, windows integrated for windows NT auth.
> I have already test all authentication model on a windows 2000 server
> DC but its the first time that i test it on a Server 2003. As
> everything is denied by default on server 2003 in opposite to Server
> 2000 . Do you have any idea of what could be the reason that when
> calling the default web site page Home.aspx IIS doesn't redirect to
> login.aspx for basic auth. while Authentication is set to Forms in the
> web.config file?
> Dominick a écrit :
>
>> Hello Eric,
>>
>> i guess IIS is not authenticating - disable anonymous access to the
>> virtu
>>
> al
>
>> directory in IIS
>>
>> ---------------------------------------
>> Dominick Baier - DevelopMentor
>> http://www.leastprivilege.com
>>> I have Windows xp as workstation OS and Windows Server 2003 Standard
>>> Edition for the server but Windows NT 4 as primary Domain
>>> controller.
>>> I
>>> made a login.aspx and a home.aspx page to test windows
>>> authentication
>>> with the lines of code needed in the web config file and code
>>> behind.
>>> The Home.aspx page is set as the default page in IIS 6.0.
>>> I have configured IIS for Basic authentication in the Directory
>>> Security panel of IIS manager.
>>> When I'm calling the site with the default Url home.aspx page is
>>> displayed with nothing for User.identity.Name.
>>> Then i tried with windows integreted authentication. I have made the
>>> appropriate amendements in the web config file but when i test it
>>> still nothing is displayed for User.identity.Name.
>>> Could someone tell me what could be wrong.
>>> Does NT integrated authetication work with a NT4 Primary DC and
>>> Server
>>> 2003 domain member server?
>>> thanks in advance for any help
>>> Eric
>>>

Relevant Pages

  • Re: Windows Authentication method on IIS6
    ... The microsoft.public.windows.server.* groups deal with Windows 2003 ... The microsoft.public.inetserver.* groups deal with IIS ... > the authentication button, ... You can configure either one or multiple realm names on a server running IIS ...
    (microsoft.public.win2000.security)
  • Re: How to access Windows IIS User Info with Perl
    ... but the IIS server is configured for Windows ... allowed for Basic Authentication, Windows Authentication (or whatever ... Do you know if they are part of a standard ...
    (comp.lang.perl.misc)
  • Windows Authentication with IIS on separate machines
    ... Yes, setting Basic Authentication in IIS works, but the ... >in SQL server but doesn't work if user account was ... >imported from a Windows account. ...
    (microsoft.public.sqlserver.security)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... IIS Resource Guide). ... I next looked a little into Windows 2003. ... IMHO, the label on the option, "Enable Integrated Windows Authentication", ... the documentation leads one to ...
    (microsoft.public.windows.server.security)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... IIS Resource Guide). ... I next looked a little into Windows 2003. ... IMHO, the label on the option, "Enable Integrated Windows Authentication", ... the documentation leads one to ...
    (microsoft.public.inetserver.iis.security)