Windows 2003/IIS 6.0 + IE 6.0 - random authentication dialog
From: AIDS (aids_at_programmer.net)
Date: 08/19/03
- Next message: bbxrider: "not iss per se but security issue"
- Previous message: TaVo: "Re: ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.08.19"
- Next in thread: David Wang [Msft]: "Re: Windows 2003/IIS 6.0 + IE 6.0 - random authentication dialog"
- Reply: David Wang [Msft]: "Re: Windows 2003/IIS 6.0 + IE 6.0 - random authentication dialog"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 19 Aug 2003 10:52:51 -0700
Hi All!
I've got a problem with our application -> there is a problem with
authentication.
Our application has a Web UI and also for dynamic content an ISAPI
extension DLL is used.
The application's web-site is configured to use integrated Windows
authentication and runnning under Windows 2003 Server Standard
Edition/IIS 6.0
(stand-alone server, not a member of domain). As a client Internet
Explorer 6.0 is used. I run it on the same computer as a server under
Administrator account.
Occasionally IE displays authentication dialog asking user to input
user name & password. Even if I type correct user name/password the
dialog appears again and again.
I checked NTFS permissions on every file on the web-server -> for all
of them Administrator has Full Access rights.
It happens (not every time) when the UI requests dynamic content from
the server using our ISAPI DLL. I have checked server variables from
inside the DLL and found that AUTH_USER and LOGON_USER are always set
to correct username (Administrator in my case). So I assume that the
DLL is called using right user credentials.
Then I looked at the way we request dynamic content.
We use a special frame (it's a hidden frame) and Javascript function
which builds a URL with parameters, passes it to hidden frame and then
parses results.
What I found that sometimes IE failes to authenticate against IIS
using
integrated Windows security.
Application was working OK under Windows 2000/IIS 5.0.
At the moment I am completely out of any ideas what causes that
behavior.
- Next message: bbxrider: "not iss per se but security issue"
- Previous message: TaVo: "Re: ** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.08.19"
- Next in thread: David Wang [Msft]: "Re: Windows 2003/IIS 6.0 + IE 6.0 - random authentication dialog"
- Reply: David Wang [Msft]: "Re: Windows 2003/IIS 6.0 + IE 6.0 - random authentication dialog"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|