Anonymous and NTLM

rgmullen_at_gmail.com
Date: 06/14/05 

Date: 13 Jun 2005 15:21:56 -0700

I have a customer requirement where they would like to alllow certain
users to use NTLM as they enter our secure site while others would
login through a web form. The desired action would be to check the
interactive user's credentials upon entry to the site then compare it
to an ACL we have. If they are not in this list they would be
redirected to the web form login.

It appears to me that enabling both Anonymous and NTLM is IIS will use
the lowest credentials needed to complete a given resource request. IT
would seem that the goal of this requirement could be met by denying
access to the initial page to IUSR_<servername> account and then
redirecting in ASP code on failure but this would seem to be less than
ellegant at best.

Can anyone offer a suggestion as to how the initial resource can be
left unsecured yet have the server challenge for credentials anyway?

Relevant Pages

  • Re: Cannot access secure sites
    ... > When she accesses a secure site with a login, ... > emptied the Internet Explorer Temporary Internet Files. ... Sometimes some pop-up stoppers will stop the security dialog box from coming ...
    (microsoft.public.windowsxp.general)
  • Cannot access secure sites
    ... When she accesses a secure site with a login, ... the security settings were set correctly in Tools/Advanced/Security. ... emptied the Internet Explorer Temporary Internet Files. ...
    (microsoft.public.windowsxp.general)
  • Re: Help with a module.
    ... I have used the LWP suite to talk to sites, ... Below is an example of a login where $ua is an LWP::UserAgent ... Jim Simpson wrote: ... > data out of the secure site but I need something to talk to a secure site. ...
    (comp.lang.perl.modules)
  • Re: JAAS + SERVET + NT PDC
    ... > login) and then check if this login has rights over the application ... This is effectively how IIS's "Integrated Windows Authentication" works ... (via either the NTLM or Negotiate (SPNEGO) ... This will only work with web browsers supporting NTLM -- including ...
    (comp.lang.java.programmer)
  • Flash+SSL
    ... I'm running a secure site that uses a Flash ... The login page uses LoadVars to call a PHP ... everything works fine (Apache 1.3). ... When looking at the server logs the right request ...
    (microsoft.public.windows.inetexplorer.ie6.browser)