Re: Unable to reverse back to NTLM

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 02/25/04


Date: Wed, 25 Feb 2004 13:52:05 +1100

In your browser, is there an option to "remember your username and password"
for this site? Perhaps the user ticked that box, and the browser is
auto-logging in?

You can test to see what's happening by using telnet:
c:\>telnet
telnet>open www.yoursite.com 80

GET / HTTP/1.1
HOST: www.yoursite.com
[enter]
[enter]

Since you are not providing any credentials, the server should send back a
403, with the WWW-AUTHENTICATE headers after that.

Cheers
Ken

"KL Wong" <klwong@swire.com.au> wrote in message
news:5e65d905.0402240057.27153f97@posting.google.com...
: I am running IIS6 on a Window 2003 server. Have set NTLM as the
: authentication method, and the userid/password/domain prompt comes up
: nicely when try to access the virtual directory. Then we got an error
: 402.1 when internet users try to access our web, hence I change it to
: 'basic authentication' to see if it relates to the authentication
: method, and yes it is.
:
: When I try to change the authentication from basic back to NTLM, the
: userid/password/domain prompts dont come up any more. How do I know
: whether it is running NTLM or Basic authentication now !!
:
: Any help most appreciated. B.Rgds/KL



Relevant Pages

  • Re: LOGON_USER lifetime using NTLM
    ... ASP.NET, i.e. Windows and Forms. ... Once the user logins using NTLM, ... issue a Form authentication cookie and then assume the user is logged through ... ASP.NET to issue 401 back to browser manually. ...
    (microsoft.public.inetserver.iis)
  • Re: LOGON_USER lifetime using NTLM
    ... In your case, since you are issuing the forms auth cookie back to the user, ... you control how authentication is going to work. ... Once the user logins using NTLM, ... ASP.NET to issue 401 back to browser manually. ...
    (microsoft.public.inetserver.iis)
  • Re: LOGON_USER lifetime using NTLM
    ... NTLM authentication persists as long as the original authenticated ... send requests to the server. ... the browser will re-negotiate the authentication on its own ...
    (microsoft.public.inetserver.iis)
  • Re: Basic Authentication and popup windows
    ... The secured site is opened in a separate window. ... This is when the Basic Authentication is performed. ... existing browser window, the authentication details are still valid ...
    (microsoft.public.dotnet.faqs)
  • Re: Basic Authentication and popup windows
    ... The secured site is opened in a separate window. ... This is when the Basic Authentication is performed. ... existing browser window, the authentication details are still valid ...
    (microsoft.public.dotnet.general)