Re: Password is cancelled

From: ALP (anonymous_at_discussions.microsoft.com)
Date: 04/14/04 

Date: Wed, 14 Apr 2004 12:58:27 -0700

Thanks for the info. I changed it to basic since I am
using SSL anyway. Unfortuneately it didn't seem to make a
difference. After I login and select a link I am
presented with another password prompt. In reality I am
presented with 3 prompts all together. Two site password
prompts and a network password prompt. I can cancel
afterentering thefirst set of credentials and it will
still forward me. I don't understand why it is prompting
me and more importantly why it is forwarding me without
the password.

TIA

>-----Original Message-----
>If you're not on the local network, I would highly
recommend that you use
>basic authentication over SSL. Integrated
authentication is similar in
>behavior to browsing to a Windows-based local network.
Thus, integrated
>authentication, while generally more secure, is really
intended/recommended
>for use in LAN/intranet environments.
>
>It can be made to work in other environments, but is
problematic, and may
>require you to loosen your network access controls,
which is far worse than
>having to move to basic over SSL.
>
>"ALP" <anonymous@discussions.microsoft.com> wrote in
message
>news:18a2a01c420bb$3c23f860$a601280a@phx.gbl...
>> I am not on the local network. Basic auth is not setup
>> and cookies are enabled.
>> >-----Original Message-----
>> >Are you on the local LAN with the web server? If not,
>> are you allowing
>> >basic authentication as well? And if so, are cookies
>> enabled?
>> >
>> >"ALP" <anonymous@discussions.microsoft.com> wrote in
>> message
>> >news:1b69501c420ac$8be263f0$a301280a@phx.gbl...
>> >> I'm setting up IIS on W2K with Windows Integrated
>> >> security. The passwords are not working the way it
>> should
>> >> or at least the way I would have expected. There is
a
>> >> single index page with various directories on the
site.
>> >> All directories, files and the index page have the
same
>> >> security. I access the site and get prompted for the
>> >> username and password, enter it and I get the index
>> page.
>> >> When I select any link, I again get prompted for the
>> >> password. Regardless of whether I enter the
password or
>> >> select cancel I get forwarded anyway. Why the prompt
>> and
>> >> how do I get rid of it?
>> >>
>> >> TIA
>> >
>> >
>> >.
>> >
>
>
>.
>

Relevant Pages

  • Re: How to Implement a Single Logon Across Multiple Web Servers
    ... We also got concern with Basic + SSL :-) The encryption might slow down the ... Also, for those staff having their own pc, no prompt at all as we ... >> We need to use Integrated for security reason. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS4 --> Common Name??
    ... And you can't use host headers and SSL. ... if not you will be prompt ... > I am at a lost, could someone please explain this to me, before I get the ... > I completely do not understand, and more time evaluating the product? ...
    (microsoft.public.inetserver.iis.security)
  • Re: SSL versus logon
    ... prompt http://freeweb.siol.net/mpihler/certnottrusted.jpg -- this prompt is ... do I really want to use SSL with untrusted certificate. ... >> logon procedure? ...
    (microsoft.public.windows.server.general)
  • RE: Outlook Web And VPN issues
    ... You might be seeing the prompt for 443 SSL ... Best Regards, ... James R Frederickson, MCSE NT4/2000/2003 ...
    (microsoft.public.windows.server.sbs)
  • Re: How to deny access to domain shares from a workgroup computer
    ... If I take the example of Internet Explorer pass-through authentication: ... the authentication process is identical whether I am prompted and enter credentials, or whether my logged in credentials are passed-through ... It is just an authentication based on username and password; and authentication protocol designed to make it hard to intercept or decipher the authentication in transit; and a convenience mechanism for passing through under certain circumstances without an explicit prompt. ... By adding a prefix he is really saying "this version rather than that version of my account". ...
    (microsoft.public.windows.server.security)
Loading