Re: webdav prompts for second password

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 05/14/05 

Date: Fri, 13 May 2005 20:14:26 -0700

I'm sorry, but there is no such thing as "don't ask for credentials more
than once" feature on the server, nor is there a privilege/permission/right
to adjust. HTTP is stateless, so a web server like IIS really has no idea
what "more than once" means. It just knows that it is configured to ask for
authentication for certain URLs, so it dutifully asks for authentication.

If the client successfully auto-authenticates, then you won't see any
password box. If the client fails, then you will see some password box.

I am not an IE expert, so I have no idea whether the "save password
checkbox" actually leds to IE auto-authenticating on the requests in
question, nor if it persists the authentication across different
connections. To prove that, you will need to take a network capture of
traffic between the client and server and make that available for viewing.

The network trace will definitively show what is going on and what is going
awry.

I can only say that WebDAV is definitely working for me on Windows Server
2003 without any prompts at all, so let's see what's missing in your
configuration... 

-- 
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"tony" <none@none.com> wrote in message
news:%23cWeb09VFHA.1508@tk2msftngp13.phx.gbl...
I have the save password box checked if thats what you mean. I keep getting
the second authentication box
"David Wang [Msft]" <someone@online.microsoft.com> wrote in message
news:eIoImtSTFHA.2392@TK2MSFTNGP10.phx.gbl...
> Is the browser configured to auto-login because if it doesn't, then the
> second prompt can show up.
>
> In other words, this is usually not a server-side issue. The server will
> always challenge the client for authentication when accessing a secured
> resource. It is always up to the client to auto-login to prevent such
> login
> prompts from reaching the user.
>
> -- 
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> //
> "tony" <none@none.com> wrote in message
> news:Ojjs4MdRFHA.2136@TK2MSFTNGP14.phx.gbl...
> I have WebDav set up on a 2003 server and everything seems to be working
> fine.  When a user opens a web folder he/she gets prompted to enter
> credentials and then can browse folders and subfolders that they have
> access
> to.
>
>
> The issue is that when they try to open a file like excel or word they get
> prompted for their
> credentials again. If they enter them again they can access the file and
> then
> save with no problems. But the second prompt seems unneccessary. Is there
> a
> rights setting that needs to be ajusted or something else that needs to be
> done to stop this second request for credentials? Thanks
>
>
>
>
>

Relevant Pages

  • Reuse of Remoting Channels...
    ... makes it possible for the server to know the identity of the caller. ... If my client is on the other side of a Windows 'realm' (as in the ... RemotingConfiguration options) to reject any clients whose credentials ... "Remoting server cannot be reached. ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: SSPI Kerberos for delegation
    ... We want the authentication to happen without providing credentials ... But SSPI while authenticating from the client to the server can do mutual ...
    (comp.protocols.kerberos)
  • Re: rpc over http problem
    ... I do get prompted for credentials after the server certificate prompts ... :> Exchange Server Settings ...
    (microsoft.public.exchange.admin)
  • Re: Authentication woes
    ... I can not really understand how the client should connect to the DC when they are at work with the 192.x.x.x ip when the server is in 10.x.x.x network. ... If i read the output for the client it is member of domainb.internal and not member of domain.com like the DC, ... If the user logon with cached credentials, ...
    (microsoft.public.windows.server.active_directory)
  • Re: RDP 6 Does not work
    ... UsernameHint pre-fills the user name field when the *client* prompts the user for credentials in the case where no previously-saved credentials exist for the server name specified. ...
    (microsoft.public.windows.terminal_services)