Re: Host headers and integrated windows authentication problems

From: Adam Nickells (adamnickells_at_hotmail.com)
Date: 10/21/03


Date: Tue, 21 Oct 2003 14:27:23 +0100

Thanks for that info Desmond. I'll look into it when I get back in the
office next week.

Cheers,

Adam

"Desmond Lam" <deslam@online.microsoft.com> wrote in message
news:%23kCmp43lDHA.2528@TK2MSFTNGP12.phx.gbl...
> Hi Adam,
>
> When you access a local area network (LAN) or intranet share, or intranet
> Web site by using an Internet Protocol (IP) address or fully qualified
> domain name (FQDN), the share or Web site is identified as being in the
> Internet zone instead of the Local intranet zone. For example, this
behavior
> can occur when you access shares or Web sites with Internet Explorer,
> Windows Explorer, a command prompt (for example, by using the net use
> command), or a Windows-based program when you use an address in any of the
> following formats:
>
> - \\<Computer>.<childdomain>.<domain>.<com>\<Share>
> - http://>.<childdomain>.<domain>.<com>
> - \\157.54.100.101\share
> -
file://157.54.100.101/share
> - http://157.54.100.101
>
> This behavior can occur because an FQDN or IP address contains periods,
> which causes Internet Explorer to identify the Web site or share as being
in
> the Internet zone. This behavior can cause Internet Explorer to prompt you
> for a user name, domain name, and password when you access the intranet
Web
> sites that require authentication.
>
> To find out the workarounds to this problem, refer to this KB:
> Intranet Site Is Identified as an Internet Site When You Use an FQDN or IP
> Address
> http://support.microsoft.com/?id=303650
>
> Hope it helps,
> Desmond
>
> "Adam Nickells" <adamnickells@hotmail.com> wrote in message
> news:1066683047.938431@ananke.eclipse.net.uk...
> > Hi,
> >
> > I posted this to the microsoft.public.inetserver.iis group, but then
found
> > this one and thought it might be a more appropriate place.
> >
> > here's the problem. It's fairly long......and it is seriously starting
to
> > annoy me too! :-)
> >
> > IIS5 - Windows 2000 Server
> >
> > I've created a new website called Systems Team. It's running on port 80,
> > same port as the default site, so I've given it a host header of
> > systems.test.co.uk. The bit after systems is our domain name.
> >
> > I've created a DNS entry in our test.co.uk zone called Systems pointing
to
> > the IP of the server.
> >
> > No problems so far. All website access is fine using a URL of
> > http://systems.test.co.uk.
> >
> > Now, when I restrict permissions on the folder that the website maps to
it
> > all goes pear shaped. I have permissions set so that only Domain Admins
> have
> > rights to the folder. The website is configured for Integrated
> > Authentication and Basic Authentication. Basic is so that we can access
it
> > if we're not logged into a PC as ourselves.
> >
> > Now when I go to systems.test.co.uk, I get prompted for a username and
> > password. If I enter my details which I'm already logged on with, I get
in
> > fine. So for some reason, the integrated authentication isn't working.
> >
> > Now if I remove this new site, add a Virtual Directory under the default
> > site, so I just reference the site by http://servername/systems I get in
> > with no problems.
> >
> > Soooo...it seems to be a problem with using Host Headers and permissions
> on
> > the website folder.
> >
> > Anyone got any ideas?
> >
> > Cheers,
> >
> > Adam
> >
> >
> >
>
>



Relevant Pages

  • SBS 2003 default intranet problem
    ... I have a SBS 2003 server connected to the internet via a router. ... default website and the intranet website everything is the default install. ... For the internet site I am able to get to my remote login as well as my OWA ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS 6.0 Keeps prompting for LoginID and Password
    ... I checked IE shows internet in the right corner when I access the website by IP. ... Therfore I can not ensure that all clients will have the site in their intranet zones. ... I tried sub authentication to allow IIS to handle the password for anonymous user without success. ...
    (microsoft.public.inetserver.iis)
  • Re: Host headers and integrated windows authentication problems
    ... > Hi Adam, ... > When you access a local area network or intranet share, ... > Internet zone instead of the Local intranet zone. ... when I restrict permissions on the folder that the website maps to ...
    (microsoft.public.inetserver.iis.security)
  • Re: Host headers and integrated windows authentication problems
    ... When you access a local area network or intranet share, ... Web site by using an Internet Protocol address or fully qualified ... Internet zone instead of the Local intranet zone. ... > I've created a new website called Systems Team. ...
    (microsoft.public.inetserver.iis.security)
  • =?iso-8859-1?q?[Solved]_Sicherheitsmeldung_beim_=F6ffnen_von_z=2EB=2E_Zip-Dateien_auf_ei
    ... Windows XP Pro Sp1 / IE7. ... Ich finde das sowas von irritierend (Internet Explorer? ... Intranet will. ...
    (microsoft.public.de.german.windowsxp.sonstiges)

Loading