Re: ... a real easy security problem.
From: John Hoge (jhoge123_at_yahoo.com)
Date: 03/18/04
- Next message: KC: "HTTP-standard Basic Authentication"
- Previous message: DC: "W2K3 Passive FTP on Windows Media Server"
- In reply to: Karl Levinson [x y] mvp: "Re: ... a real easy security problem."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 18 Mar 2004 09:05:23 -0800
Karl,
There's no error message, the credentials box just comes back blank.
Auditing is enabled for this directory, but nothing shows up in the
event log.
I worked around the problem by creating a new directory for this file
and assigning the security rights at the directory level. Suddenly the
.asp page and the .htm page can both be browsed with the appropriate
credentials. I guess there is some odd behaviour when using NTFS
permissions at the file level that are different from the directory
containing that file. Another "undocumented feature"...
- Next message: KC: "HTTP-standard Basic Authentication"
- Previous message: DC: "W2K3 Passive FTP on Windows Media Server"
- In reply to: Karl Levinson [x y] mvp: "Re: ... a real easy security problem."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
