Re: How to disable WinNT Login Prompt

Are you suggesting that even though the three sites are setup the same, that
access to one is immediate and the other two require the WinNT login because
the anonymous account and worker process may not have read access to aspx
pages but do to .htm pages?

Note: I'm prompted when I try to access the site from my dynDNS and the
other I don't, but the real problem is the phone WAP browser that doesn't
pop the WinNT login dialog, but instead says login fails and never shows the
web app's login page.

TIA

JeffP....

"Dominick Baier" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:4580be631330f8c8995eadc11698@xxxxxxxxxxxxxxxxxxxxx
does the anonymous account and the worker process account have read access
to all resources?

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

I think so, I have all three setup the same and I can only access the
one site, each is located under the same wwwroot.

I have Anonymous accees enabled IUSER_BOXNAME with Let IIS control the
Pwd checked as well as Integrated Windows Auth checked.

All three sites setup the same are located the same machine and two
were behaving badly.

The WAP browser doesn't appear to enable a login, perhaps there is a
hidden option.

JeffP...

"Dominick Baier" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:4580be631330b8c8994fe37b48af@xxxxxxxxxxxxxxxxxxxxx

have you enabled anonymous acccess for your app in IIS?

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com
I have a few websites setup on one system on the DMZ

Accessing the website and web apps via an alias domain name (free
DynDNS.Org)

When I try to open default.htm I can view this page in three web
apps.

When I try to open the login.aspx, which accepts a querystring and
will auto-login, or prompt for a login, instead I get a WinNT login
Prompt.

This does not occur on one of my web apps, I've dbl checked the site
settings / properties and I'm not finding a difference to explain
this behavior.

I use this system to demo updates and changes to our clients during
development.

Currently when users try to access these sites via their phone the
WinNT login does not display but they do get a login error msg. In
other words they don't get to my login.aspx.

Any info is appreciated.

JeffP....





.

Relevant Pages

  • Re: How to disable WinNT Login Prompt
    ... set the IIS settings to anonymous, ... that access to one is immediate and the other two require the WinNT login ... This does not occur on one of my web apps, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to disable WinNT Login Prompt
    ... I have all three setup the same and I can only access the one ... The WAP browser doesn't appear to enable a login, ... When I try to open default.htm I can view this page in three web apps. ... WinNT login does not display but they do get a login error msg. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: MSDE on WIN2003 Server SBS
    ... this clearly states that the WinNT login you are using is not granted access ... to SQL Server instance.. ... try login to SQL Server with a granted user and check that the WinNT login ...
    (microsoft.public.sqlserver.msde)
  • Re: Pen testing techniques
    ... login form, its far more difficult to secure an app's internals. ... tight on time, and there are no apparent vulnerabilities to target, be ... For web apps I prefer a web app vulnerability scanner ...
    (Pen-Test)
  • Re: Secure Folders
    ... them to the login page. ... Simple enough to setup, all of 5 minutes of work. ... > With regards to preventing them accessing an image directly - slightly ... > for some reason decides to take the URL of an image in the secure area, ...
    (microsoft.public.inetserver.asp.general)