Re: disabling IIS login prompts
From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 06/19/04
- Next message: Srinivas: "ADSI Authentication using ASP - Problem"
- Previous message: David Wang [Msft]: "Re: Help please to authenticate Windows users"
- In reply to: Ernie: "Re: disabling IIS login prompts"
- Next in thread: Jeff Cochran: "Re: disabling IIS login prompts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 19 Jun 2004 03:53:55 -0700
No, what you are asking for is not a standard authentication protocol that
IIS supports.
Proper authentication protocols only return "yes or no" as to whether the
user authenticated. It is a matter of user policy as to how to deal with
incorrect authentication -- you may want to redirect to the external
website, but someone else wants to just allow anonymous access, and still
some one else wants to log in under some other credentials. All these
things are custom policy outside of any standard that IIS can support, so
you really need to find custom code to do this.
So, what you are asking for is custom policy, and that is custom behavior
which one needs to write code or find modules/extensions for. In
particular, you're asking for a "fallback" authentication scheme with a
slight twist -- you want to send a 302 redirection instead of doing an
anonymous user login -- and people have written hacks and modules to do this
with IIS/ASP.Net. Please search for it.
As for the number of prompts -- no, that cannot be changed by the server.
IIS does not show any login prompts when you enable security. It is IE that
is showing the login prompts when it fails to access a protected resource,
and it chooses to retry three times before giving up. IIS cannot do
anything about that.
-- //David IIS This posting is provided "AS IS" with no warranties, and confers no rights. // "Ernie" <ebinney@sbcglobal.net> wrote in message news:859d2366.0406180804.74171151@posting.google.com... Thank you for your response. I was afraid that I couldn't turn off the prompt. Can I adjust the number of prompts? Right now it does three times if you do not get it right. I would like to cut it down in number. Ernie "Bernard" <qbernard@hotmail.com.discuss> wrote in message news:<e9NRHZQVEHA.1292@TK2MSFTNGP10.phx.gbl>... > I'm afraid not. if you using IIS authentication, by design, in local > intranet zone, IE auto login for user, hence no prompt. however, if error > during auth or user don't has permissin. IIS will chanllenge the user for > new user credential, hence IE prompt. there's no way you can 'modify' this > as. IE behave this way. > > So to address you need, you might need to have own auth process. say store > in db, check session, if not login, redirect or etc. > > Read this kb on how IIS authenticate browsers > INFO: How IIS Authenticates Browser Clients > http://support.microsoft.com/?id=264921 > > > -- > Regards, > Bernard Cheah > http://www.tryiis.com/ > http://support.microsoft.com/ > http://www.msmvps.com/bernard/ > >
- Next message: Srinivas: "ADSI Authentication using ASP - Problem"
- Previous message: David Wang [Msft]: "Re: Help please to authenticate Windows users"
- In reply to: Ernie: "Re: disabling IIS login prompts"
- Next in thread: Jeff Cochran: "Re: disabling IIS login prompts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
