Re: Help Required: Digest Authentication and Trusted environment

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 06/21/04


Date: Mon, 21 Jun 2004 11:50:27 +1000

This is not an IIS question. You can create trusts using the Active
Directory Domains and Trusts MMC Snapin.

HOWEVER - before you do that, do some reading up on Active Directory
concepts. If you are unfamiliar with trusts, then you should get a handle on
the basics before you go around changing settings.

Cheers
Ken

"Anshuk Jain" <virarlocal@yahoo.com> wrote in message
news:3f20b5ae.0406200923.6cf0b939@posting.google.com...
: Scenario:
: There are 2 servers.
: server1.domain1.microsoft.com and server2.domain2.microsoft.com.
:
: There are 2 users.
: domain1\user1 and domain2\user2
:
: I need to provide Digest Authentication at both the servers. Both the
: servers are Windows 2003 Server. Users have a valid Windows user
: account stored in Active DirectoryŽ on the domain controller.
:
: Problem:
:
: In server1.domain1.microsoft.com, only user1 is getting authenticated
: while in server2.domain2.microsoft.com, only user2 is getting
: authenticated. I am checking this by trying to access an html file in
: a virtual directory at both the servers.
:
: What should I do so that user2 also gets authenticated in
: server1.domain1.microsoft.com and similarly user1 also gets
: authenticated in server2.domain2.microsoft.com?
:
: What settings need to be enabled so that the above is possible?
:
: Also server1.domain1.microsoft.com allows both user1 and user2 to be
: added in its local group. But server2.domain2.microsoft.com allows
: only user2 to be added in its local group
:
: My Knowledge:
: The requirements as identified by Digest Authentication are:
:
: The user and the server running IIS must be members of, or be trusted
: by, the same domain.
: An authenticating domain controller and the server that is running IIS
: must exist in a trusted environment.
:
: How should I create this trusting relationship between 2 domains?
:
: Regards,
: Anshuk Jain



Relevant Pages

  • Re: Windows Authentication Access Denied Error
    ... It confirms that the issue has nothing to do with IIS and is specific ... or at least apply different group policies for servers. ... using Windows Authentication. ...
    (microsoft.public.inetserver.iis.security)
  • Domain authentication IE->IIS extension->Named pipe->NT service ?
    ... I have a system with an two Windows 2000 Servers - one ... named pipes and Win2k domain authentication and user ... I recently started to create an IIS based user interface to my ... IIS setting that's wrong or isn't perhaps second hand authentication ...
    (microsoft.public.win2000.security)
  • Domain authentication IE->IIS extension->Named pipe->NT service ?
    ... I have a system with an two Windows 2000 Servers - one ... named pipes and Win2k domain authentication and user ... I recently started to create an IIS based user interface to my ... IIS setting that's wrong or isn't perhaps second hand authentication ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: HELP PLEASE The request failed with HTTP status 401: Access Denied.
    ... Web Security: Part 2: Introducing the Web Application Manager, Client ... Authentication Options, and Process Isolation ... It introduces the Web Application Manager in IIS that ... logon session, which is dangerous. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Can no longer access ActiveSync
    ... OMA and Exchange/Exchange-OMA virtual directory. ... Please verify Authentication settings by the following steps. ... Open IIS Manager ... issue may be caused by the Exchange attribute of original user account. ...
    (microsoft.public.exchange.admin)