Re: Accessing Authenticate Header

From: Ñ (ðèðð)
Date: 01/06/03


From: "Ñ" <ðèðð>
Date: Mon, 6 Jan 2003 23:14:20 +1100


ÔÅÂÅ ÓËÏÌØËÏ ÌÅÔ
Matt Long <mlong@phalanxsys.com> ÐÉÛÅÔ ×
ÓÏÏÂÝÅÎÉÉ:OfXdd9BqCHA.1660@TK2MSFTNGP10...
> Hi,
>
> I would like to access the HTTP Header "Authenticate" such that I can read
> the base64 encoded username:password and authenticate the user
independently
> of IIS. The problem that I seem to have encountered is that by creating a
> listener via inherenting either IHttpHandler or IHttpAsyncHandler does not
> allow me access to the "Authenticate" header. It seems that if I enable
> Basic Authentication with IIS, I can read the header if and only if the
> header is authenticated by IIS. However, if I enable IIS with anonymous
> authentication AND send a request with an "Authenticate" header via
> CredentialsCache, the header is not present in the HttpRequest headers
> collection.
>
> Other than much entra effort building a host from HttpWorkerRequest is
this
> going to be possible to read the "Authenticate" header from a listener
> inherenting
> from either IHttpHandler or IHttpAsyncHandler???
>
> Thx,
>
> -Matt
>
>
>
>



Relevant Pages

  • Re: [LIST][SECURITYBASICS] Sender Spoofing via SMTP
    ... Implement a forced SMTP AUTH strategy for all your users, ... as your roaming users will have to authenticate. ... Replace the MAIL FROM header with the true account name and valid ...
    (Security-Basics)
  • Re: Accessing Authenticate Header
    ... Thx, ... > I would like to access the HTTP Header "Authenticate" such that I can read ... > of IIS. ... > allow me access to the "Authenticate" header. ...
    (microsoft.public.dotnet.security)
  • Re: Accessing Authenticate Header
    ... > I would like to access the HTTP Header "Authenticate" such that I can read ... > of IIS. ... > allow me access to the "Authenticate" header. ... if I enable IIS with anonymous ...
    (microsoft.public.dotnet.security)
  • Accessing Authenticate Header
    ... I would like to access the HTTP Header "Authenticate" such that I can read ... Basic Authentication with IIS, I can read the header if and only if the ... if I enable IIS with anonymous ...
    (microsoft.public.dotnet.security)
  • experiment supports concept of using host header names as securit y layer
    ... ISAPI filters can't evaluate a request until a virtual site has been ... selected and its set of running ISAPI filters has become known to the IIS ... As a quick experiment in using a host header name as a security device, ...
    (Focus-Microsoft)

Quantcast