Re: Authentication Problems

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 12/10/02


From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Tue, 10 Dec 2002 11:21:20 -0500


How exactly is this not working? Error message, etc?

I think that should work, though you will either need to use host headers
[or different port numbers other than 80] so that IIS knows which site is
being accessed. host headers are probably better, but if you use SSL you'll
need to use different port numbers for the SSL parts of each web site.

You'll also want to use IP restrictions on the anonymous web site so that
internal users [VPN, RAS, etc] cannot surf anonymously.

www.iisfaq.com is a great resource for most common IIS questions.

I don't know your requirements or goals, but I'm not sure I see a big
advantage in requiring a login ID and password only some of the time.

"CB" <newsalias@blueyonder.co.uk> wrote in message
news:u3oJ9.5054$6N6.43391194@news-text.cableinet.net...
> What I am trying to give access to our intranet to the 800+ users we have
on
> our network. When using the intranet internally they must not be ask for
a
> password, yet from outside I want them to authenticate using the NT
> database. I have tried two ways to achieve this and neither seem to
work.
> Hopefully someone can point me in the right direction as I am going
> drastically wrong somewhere.
>
> I have tried creating two webs, lets say intranet internal and intranet
> external.
> Internal points to lets say d:\intranet and has anonymous set to on.
> External points to the same folder and has nt challenge/response enabled
and
> anon disabled.
>
> As IIS takes into account the NTFS permissions ?? rather than web
settings,
> anon access is therefore enabled on the external web.
>
> Obviously I would like this to be achieved using just one web per domain
and
> have a setting that users must authenticate when using external ips, but
> there doesn't appear to be a feature for this.
>
> For reference I am using version 4.
>
> Any help much appreciated.
>
> --
> CB
>
> Apologies for the X post.
>
>



Relevant Pages

  • RE: Sharepoint Central Administration (Stopped)
    ... sharepoint central administration web site and receive an error message. ... line to see if another process is using port 80 or port 443 or 8081. ... registry subkey on the computer that is running IIS. ...
    (microsoft.public.windows.server.sbs)
  • RE: Sharepoint Central Administration (Stopped)
    ... sharepoint central administration web site and receive an error message. ... line to see if another process is using port 80 or port 443 or 8081. ... registry subkey on the computer that is running IIS. ...
    (microsoft.public.windows.server.sbs)
  • Re: WWW Server(WXP Pro) -- Error on Default Web Sites
    ... Please try changing the site to use another port ... Start a Web Site ... I get "unable to start debugging on the web server. ... I have uninstalled and reinstalled IIS to no effect. ...
    (microsoft.public.windows.server.setup)
  • Re: Creating a server based web on a local server
    ... don't forget that your ISP might block port 80 so nobody outside will be ... in website property in MMC. ... > do is create a web site on the server so can make full use of the front ... IIS ...
    (microsoft.public.frontpage.client)
  • Re: how to configure host headers for 3 IIS machines ?
    ... The problem with using host headers to direct to an IP and port (or even ... > If you only have one public IP, this will not work with IIS only. ... > based on the host header, it will redirect the request to another internal ...
    (microsoft.public.inetserver.iis)