Re: Use of IP address causes IE to prompt for password?

From: Patrik (patrik.a.karlsson@tietoenator.com)
Date: 02/11/03


From: "Patrik" <patrik.a.karlsson@tietoenator.com>
Date: Tue, 11 Feb 2003 02:35:17 -0800


Thanx for your answer...

I've studied this further and have made the following
conclusions:

1) My file system where locked down, so the anonymous user
could not access the actual files. Instead...

2) The Integrated Windows authentication where thus
activated and worked as long as you enter a computername
or more specifically, a name without dots in it.

3) When using the IP-address the "integrated windows
authentication" NEVER works without prompting for username
and password. Although this might be an IE precaution and
not a server issue.

4) I also found out that this works the same if you use
the MSXML2.XMLHTTP objects against this server. Suddenly a
prompt for username and password pops up in my Windows
application. Hmmm... IE and MSXML2.XMLHTTP seems to have
the same policy for "dotted names".

Am I right?

/Patrik

>-----Original Message-----
>This is probably because IE treats a URL with an IP
address as server name
>as "Internet" and hence does not "autologon" with logon
credentials (makes
>sense for security). Meanwhile, it treats URL with a non-
dotted machine
>name as "local intranet", which does have "autologon"
enabled.
>
>You really have no way to control this -- it is
completely a client-side
>configuration that is unchangeable by the server.
>
>--
>//David
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>//
>"Patrik" <patrik.a.karlsson@tietoenator.com> wrote in
message
>news:060c01c2d196$00863450$a201280a@phx.gbl...
>Hi
>
>I've a web application running in our intranet. Whenever a
>user types in the computername in the URL everything is
>fine.
>
>However, when the IP address is typed in, IE prompts for
>username and password!? Why so?
>
>The directory security settings are set to "Anonymous
>access" and "Integrated Windows Authentication".
>
>/Patrik
>
>
>.
>



Relevant Pages

  • NetSec Security Advisory: Multiple Vulnerabilities Resulting From Use Of Apple OSX HFS+
    ... NetSec released details of a vulnerability impacting ... methods to an underlying legacy HFS+ file system: ... one method to leverage this 'feature' of the legacy HFS+ driver in OS X: ... The default configuration of several web server ...
    (Bugtraq)
  • Re: HTTP FS?
    ... URL is exactly what http has been "designed" for. ... Even a read-only file system allows you to list a directory (as far as I ... HTTP it isn't included in the protocol. ... To give the server a clue, ...
    (comp.os.minix)
  • Re: Best way to "Clone" a Linux Hard drive?
    ... >> near certainty, not a risk, since your server is busy enough to make you ... It's not logfile integrity, but file system integrity. ... let's take this into a runlevel where only three things run: ... What you should do is run a failover server as a mirror, ...
    (comp.os.linux.setup)
  • Re: Asynchronous socket programming vs. remoting
    ... You are the first person that said I should use sockets. ... them quicker than I can load them from my harddrive using the file system. ... It scales nice too - I tried throwing 400 requests at the server in a span ... > do not need the same assembly on the client and server. ...
    (microsoft.public.dotnet.languages.csharp)
  • RE: No Outlook Email via RDP
    ... Ensure you join the Terminal Server to SBS domain. ... input one SBS domain user's username and password ... | the Wyse Win Terminals accessing email via RDP. ...
    (microsoft.public.windows.server.sbs)

Loading