Re: Basic Authentication User Accounts

From: Ken Schaefer (kenREMOVE_at_THISadopenstatic.com)
Date: 01/05/05

  • Next message: Bernard: "Re: Help replacing current certificate in IIS6" 
    Date: Wed, 5 Jan 2005 11:36:28 +1100

    John is correct that it's a browser issue. It is not a "caching" issue like
    the page below outlines.

    The browser will continue to send the same credentials to the server that
    were successful last time until the browser is closed -or- the server says
    that those credentials are unacceptable (and the user is prompted to use
    alternate credentials).

    That's the way it IE works. Suggest you get your users to close their
    browser windows.

    Cheers
    Ken

    "John" <ctcmptrdr@sbcglobal.net> wrote in message
    news:%jFvd.46713$Qv5.34135@newssvr33.news.prodigy.com...
    > This is a browser issue, not a web server issue. You need to modify your
    > web page design. See -
    >
    > http://www.htmlgoodies.com/beyond/nocache.html
    >
    > John
    >
    > Elga wrote:
    >> Hi, Ken.
    >>
    >> I did everything like you described in your post, and the user has to
    >> enter his password when he opens my site by typing the URL, but if he
    >> goes to another site, and ther return to mine by clicking in the browser
    >> buttons, the password is not requested anymore.
    >>
    >> What can I do to avoid this ?
    >>
    >> Thanks,
    >>
    >> Elga.
    >>
    >> "Ken Schaefer" wrote:
    >>
    >>
    >>>Hi,
    >>>
    >>>a) To require a user to type in a username/password, you can just disable
    >>>"Allow anonymous access" in the IIS Manager, and check "Basic
    >>>Authentication"
    >>>
    >>>b) To create users (and groups) you can use the Computer Management MMC
    >>>located in the Administrative Tools folder
    >>>
    >>>c) Probably the best way would be to create a group that has access to
    >>>the site, then create individual user accounts, and put them into the
    >>>group. Locate the folders/files for the website on your hard disk, and
    >>>remove permissions for Everyone, and add permissions for the group in
    >>>question. This means that users will need to authenticate -and- only
    >>>users in the group that you created can access the content (other users,
    >>>who do have a valid username/password on the system, will not be able to
    >>>access the content)
    >>>
    >>>Cheers
    >>>Ken
    >>>
    >>>"Larry C." <Larry C.@discussions.microsoft.com> wrote in message
    >>>news:277E0F0D-970E-45CB-A1BB-4CEA524037A4@microsoft.com...
    >>>
    >>>>I have an IIS 6.0 Server configured as a stand alone server with Basic
    >>>>authenication turned on for the default Web Site. What is the best way
    >>>>to
    >>>>create user accounts and associate it with the site so that whoever
    >>>>connects
    >>>>to the URL is required to type in a user name and password. Can I create
    >>>>groups?
    >>>>
    >>>>Thanks.
    >>>>
    >>>>Larry C.
    >>>>
    >>>>
    >>>
    >>>
    >>>

  • Next message: Bernard: "Re: Help replacing current certificate in IIS6"
    Loading