Integrated Authentication from XP

From: Nick Field (Nick.Field@Comino.com)
Date: 01/30/03 

From: Nick Field <Nick.Field@Comino.com>
Date: Thu, 30 Jan 2003 16:24:36 -0000

Ok folks... for those interested I have narrowed this down further.

If I browse directly to the web page from XP machine, everything works.
However - I use ISA Server to re-direct to this web site under certain
circumstances. It is only on these occasions that the authentication is
not passed through.
Again, this is only in XP, it all works fine in other OS'.

Cheers

Nick

-----Original Message-----
From: Nick Field
Posted At: 30 January 2003 15:08
Posted To: security
Conversation: Integrated Authentication from XP
Subject:

Hi Karl,
Thanks for a speedy response..
The site is internal, therefore is part of the intranet zone. I did
however try adding it to the zone manually and ensuring that it was
excluded from the proxy.
(both machines are in the same subnet)

With everything manually added, I still get prompted for username and
password - The only difference is, now if I cancel the authentication
window then hit refresh the page loads ok.
This makes it look like a bug to me - Does not authenticate on first
request, but does on second....??

I would appreciate any further insights...

Thanks

Nick

-----Original Message-----
From: Karl Levinson [x y] mvp [mailto:jamescagney90210@excite.com]
Posted At: 30 January 2003 14:23
Posted To: security
Conversation: Integrated Authentication from XP
Subject: Re: Integrated Authentication from XP

Someone else posted the same problem here in the past 2 weeks or so. My
guess is that perhaps the web site needs to be added to the Local
Intranet
zone in internet explorer tools, Internet options, security and/or check
the
settings in that zone.

Windows integrated authentication is not really meant for accessing
sites
across the internet, so I'm thinking perhaps XP or a newer version of IE
improved security by preventing windows integrated authentication from
occurring if the site is not in the local intranet zone. Depending on
the
settings, if the URL name was an FQDN name such as
http://servername.domain.com and/or the IP address is on a different
subnet,
IE might not know that it is a local intranet site until you tell it so.

If this turns out to be the case, please let us know.

"Nick" <nick.field@comino.com> wrote in message
news:08f001c2c85f$aac8f460$d3f82ecf@TK2MSFTNGXA10...
> I have an IIS 5.0 server serving users on a single domain.
> I have 'Integrated Windows Authentication' enabled.
>
> All Windows 98, NT 4 and 2000 users connect, authenticate
> and gain access to the web site perfectly well. Whenever
> any of my Windows XP users try they get prompted to enter
> a username and password. This is happening with ALL my XP
> users. All XP machines are SP1.
>
> Has anyone experienced this?
>
> Cheers
> Nick 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/2003

Relevant Pages

  • Integrated Authentication from XP
    ... therefore is part of the intranet zone. ... Conversation: Integrated Authentication from XP ... zone in internet explorer tools, Internet options, security and/or check ... Windows integrated authentication is not really meant for accessing ...
    (microsoft.public.inetserver.iis.security)
  • RE: Problem Authenticating integrating users in PWA
    ... You need to open IIS manager and open the Properties on the ProjectServer ... Go to the Directory Security Tab and click the Edit ... defined the default page as the Integrated Authentication page for Project ... all the machines have XP Pro SP1. ...
    (microsoft.public.project)
  • Re: Switch Between Integreated Auth and FBA
    ... For example WSS 3.0 allows both windows integrated authentication, or FBA using any membership provider. ... How do they handle that in their database architecture? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: OWA login
    ... I do have windows integrated authentication, ... >> I've set up and outlook web access server, ... >> Running exchange 2003 on windows server 2003. ...
    (microsoft.public.exchange.admin)
  • Re: IIS 5.0 Integrated Authentication always looks locally than to the domian it has joined
    ... >IWA is just as capable of using a local accounts database for authentication ... I always thought that the point of Integrated Authentication ... "Windows Integrated Authentication ... users have Windows domain accounts. ...
    (microsoft.public.inetserver.iis.security)