Re: IIS TOMCAT Security

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 08/01/03


Date: Thu, 31 Jul 2003 20:05:54 -0700


What authentication do you have configured in IIS?

I doubt if you have IIS Authentication configured on a website that adding a
simple / will turn off authentication.

Therefore, I think you have Anonymous enabled in IIS and is relying on some
sort of authentication done by Tomcat. You would be observing a non-IIS
behavior at this point.

-- 
//David
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Anthony" <anthony@networkrealities.com> wrote in message
news:02c101c35612$cec2aa50$a501280a@phx.gbl...
I'am having a problem configuring IIS Security with
Tomcat.  IIS has been configured to serve the Tomcat
apps.  I also ensured that Tomcat was configured to use
IIS Authentication instead of the Tomcat authentication.
I get IIS to trigger authentication when there is no "/"
after the URL
Example:
http://www.test/app
When there is a "/" after the url then IIS does not
trigger authentication but rather lets you go straight
into the application with no security enforcement.
Example
http://www.test/app/
Any help with this is greatly appreciated.


Relevant Pages

  • SPN problems?
    ... There is a web application that uses .NET (IIS) and Java (Tomcat) application servers (some users prefer one variant to another). ... The problem is when configuring Single Sign-On for this application with Active Directory as authentication service. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Kerberos Delegation thru Windows ISAPI?
    ... If I understood you correctly your goal is to trigger from MS IIS something ... written in java using kerberos authentication. ... Most probably you will have to develop SPNEGO authenticator in Tomcat ... on Windows with ISS using Integrated Windows Authentication ...
    (comp.protocols.kerberos)
  • Re: Kerberos Delegation thru Windows ISAPI?
    ... If I understood you correctly your goal is to trigger from MS IIS something ... written in java using kerberos authentication. ... we know we can do SPNEGO entriely on the Tomcat side (Vintela ... on Windows with ISS using Integrated Windows Authentication ...
    (comp.protocols.kerberos)
  • Re: Authentication with tomcat
    ... That indicates that you have "Integrated Authentication" turned on in the ... Turn it all off except for Anonymous if you do NOT want IIS to ... I try to change IIS config, but I alway have in header "Authorization" the ... > She work fine directly in Tomcat access. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Authentication with tomcat
    ... If you have authentication enabled on IIS and the client send Authorization ... She work fine directly in Tomcat access. ... In fact I see that the http header variable "Authorization" is always void ...
    (microsoft.public.inetserver.iis.security)