Re: Host headers and integrated windows authentication problems

• Previous message: Bhavin: "Problem in creating folders"
• In reply to: Adam Nickells: "Host headers and integrated windows authentication problems"
• Next in thread: Adam Nickells: "Re: Host headers and integrated windows authentication problems"
• Reply: Adam Nickells: "Re: Host headers and integrated windows authentication problems"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Tue, 21 Oct 2003 10:50:58 +0800

Hi Adam,

When you access a local area network (LAN) or intranet share, or intranet
Web site by using an Internet Protocol (IP) address or fully qualified
domain name (FQDN), the share or Web site is identified as being in the
Internet zone instead of the Local intranet zone. For example, this behavior
can occur when you access shares or Web sites with Internet Explorer,
Windows Explorer, a command prompt (for example, by using the net use
command), or a Windows-based program when you use an address in any of the
following formats:

- \\<Computer>.<childdomain>.<domain>.<com>\<Share>
- http://>.<childdomain>.<domain>.<com>
- \\157.54.100.101\share
- file://157.54.100.101/share
- http://157.54.100.101

This behavior can occur because an FQDN or IP address contains periods,
which causes Internet Explorer to identify the Web site or share as being in
the Internet zone. This behavior can cause Internet Explorer to prompt you
for a user name, domain name, and password when you access the intranet Web
sites that require authentication.

To find out the workarounds to this problem, refer to this KB:
Intranet Site Is Identified as an Internet Site When You Use an FQDN or IP
Address
http://support.microsoft.com/?id=303650

Hope it helps,
Desmond

"Adam Nickells" <adamnickells@hotmail.com> wrote in message
news:1066683047.938431@ananke.eclipse.net.uk...
> Hi,
>
> I posted this to the microsoft.public.inetserver.iis group, but then found
> this one and thought it might be a more appropriate place.
>
> here's the problem. It's fairly long......and it is seriously starting to
> annoy me too! :-)
>
> IIS5 - Windows 2000 Server
>
> I've created a new website called Systems Team. It's running on port 80,
> same port as the default site, so I've given it a host header of
> systems.test.co.uk. The bit after systems is our domain name.
>
> I've created a DNS entry in our test.co.uk zone called Systems pointing to
> the IP of the server.
>
> No problems so far. All website access is fine using a URL of
> http://systems.test.co.uk.
>
> Now, when I restrict permissions on the folder that the website maps to it
> all goes pear shaped. I have permissions set so that only Domain Admins
have
> rights to the folder. The website is configured for Integrated
> Authentication and Basic Authentication. Basic is so that we can access it
> if we're not logged into a PC as ourselves.
>
> Now when I go to systems.test.co.uk, I get prompted for a username and
> password. If I enter my details which I'm already logged on with, I get in
> fine. So for some reason, the integrated authentication isn't working.
>
> Now if I remove this new site, add a Virtual Directory under the default
> site, so I just reference the site by http://servername/systems I get in
> with no problems.
>
> Soooo...it seems to be a problem with using Host Headers and permissions
on
> the website folder.
>
> Anyone got any ideas?
>
> Cheers,
>
> Adam
>
>
>

• Previous message: Bhavin: "Problem in creating folders"
• In reply to: Adam Nickells: "Host headers and integrated windows authentication problems"
• Next in thread: Adam Nickells: "Re: Host headers and integrated windows authentication problems"
• Reply: Adam Nickells: "Re: Host headers and integrated windows authentication problems"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]