Re: Anonymous and Domain user combo on IIS
From: Deadbeef (deadbeef_at_mailcan.com)
Date: 06/30/03
- Next message: Dave: "Blocking .EXE"
- Previous message: Dino Marcantonio: "Authentication issue with IIS"
- In reply to: Andreas Klein [MSFT]: "Re: Anonymous and Domain user combo on IIS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 30 Jun 2003 16:53:47 +0200
I acknowledge the fact that anonymous contradicts with the authentication
method I use for my server
I would like that if the IIS detects anonymous user, it replaces it with a
predifined account on our domain/local users. Then I could leave anonymous
OFF and could still detect an anonymous user?
Is ISA server any help with this wierd question?
(the reason for this question:
Our company is removing some smaller companies of the domain. But stil want
them to use some of our intranet for recalling data. They will enter through
the internet.
My application is build on recognising the users by thyer logon name.
anonymous users cannot be detected because they get the popup.
)
"Andreas Klein [MSFT]" <andrekl@online.microsoft.com> wrote in message
news:Oa$F06wPDHA.2700@tk2msftngp13.phx.gbl...
> It might be easier to add a bit of logic and use a session var to the
> LOGON_USER var content. In case of anonymous you set thist to whatever you
> want so your code works as expected. Then enable anonymous access for the
> pages you want to be accessible.
>
> Your requirements contradict the design of what the LOGON_USER var is for.
> The prompt will always be there if you want the user to be authenticated
> (i.e. no anonymous allowed).
>
> There are methods to cheat but these will introduce considerable security
> issues so I cannot list these here (nor would I recommend to continue
> working into that direction).
>
> I hope this still helps.
>
> --
> Mit freundlichen Grüßen / Kind Regards,
>
> Andreas Klein
> Microsoft Services
>
> Die Inhalte der in dieser Newsgroup eingestellten Nachrichten stammen von
> Dritten. Microsoft kann daher für die Richtigkeit und Vollständigkeit der
> Inhalte keine Haftung übernehmen.
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
- Next message: Dave: "Blocking .EXE"
- Previous message: Dino Marcantonio: "Authentication issue with IIS"
- In reply to: Andreas Klein [MSFT]: "Re: Anonymous and Domain user combo on IIS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
