Re: Intermittent access to web site secured with Windows authentication

From: Marcus Crowley (crowley_at_hkstar.com)
Date: 06/23/03 

Date: Mon, 23 Jun 2003 19:41:10 +0800

Thanks, David. That at least stops us tearing our hair out and moves us into
a more productive direction.

Best regards

Marcus

"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:ujkaPF8NDHA.3664@tk2msftngp13.phx.gbl...
> Windows Authentication is connection-based and not delegatable. Thus, it
is
> useful primarily in intranet scenarios, like when you are at work.
>
> When you try to access it from home (i.e. Internet scenario), there are
> various elements of Internet networking that can prevent Windows
> Authentication from working properly. For example, your ISP may be
routing
> you through its proxy, and this proxy can violate the "connection-based"
> aspect of Windows Authentication and render it invalid.
>
> For example, Basic authentication, though clear-text, is not
> connection-based and by nature delegatable. When used with SSL, it'll
> likely work in your access scenario. Other authentication methods
supported
> by IIS are also more "Internet Scenario Friendly".
>
> --
> //David
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Marcus Crowley" <crowley@hkstar.com> wrote in message
> news:e9dv%23BONDHA.2348@TK2MSFTNGP11.phx.gbl...
> Hi all,
>
> I've searched the Web (MS, Google, Raging) and browsed this newsgroup
> without success for a problem which has been ongoing for two months:
>
> The site is our intranet running on www.pacificintranet.com. It sits on a
> Windows 2000 Server sitting in our office. I can access it from my work PC
> running IE6 on Windows 2000 Professional with one login prompt - it uses
> Windows authentication - but whenever I try to access it from home, I
> usually have trouble. At home I'm running IE6 on Windows XP Professional
and
> normally get three login prompts and a 401.1 error. Very rarely, I can get
> in after multiple login prompts (one for each image / file?). Sometimes -
as
> just now - I can login then be denied when I refresh the page I'm looking
> at. Some of my colleagues have this problem from home but some don't,
> eventhough they are running the same browser and Windows XP Home. I can't
> figure out why (a) some of us can get in fine and a few of us can't, and
(b)
> why the problem is intermittent.
>
> I'm running of of ideas... My thought was to check the log files but these
> don't even seem to be working properly as we might (successfully) request
a
> page at 4pm (from a PC in the office) but the latest log file entry is
from
> earlier in the morning.
>
> Many thanks
>
> Marcus
> Hong Kong
>
>
>

Relevant Pages

  • Re: General questions about LDAP, GC and access permissions
    ... Windows Communication Foundation) they are authenticated with the regular ... this is done by examing what groups the user is a member of. ... Since the regular windows authentication is used, ... trusted domain in an external forest. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Help please to authenticate Windows users
    ... status error code as well as Win32 error code -- I know the HTTP status code ... Windows Authentication automatically works if the machines are joined to the ... Is VS.Net on the same machine as IIS ...
    (microsoft.public.inetserver.iis.security)
  • Re: Intermittent access to web site secured with Windows authentication
    ... Windows Authentication is connection-based and not delegatable. ... When you try to access it from home (i.e. Internet scenario), ... in after multiple login prompts. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Custom authentication in a web application
    ... On the server we create our own principal object ... > Any reason for using Windows Authentication here rather than any of the ... >>two overloads of IsInRole to use our own security check. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Pre-Scanning for Marketing
    ... consider the scenario that you were going through the neighborhood seeing if windows are unlocked. ... If that scenario doesn't strike you as so over-security-conscious that it's idiotic, then you should know it is indeed a Sponge Bob episode. ... Cross site scripting and other web attacks before hackers do! ...
    (Pen-Test)