Mixed Authentication question

From: Casper van Dijk (sorry_at_nospamplease.com)
Date: 10/06/05

  • Next message: StoreThomas: "Re: Prompt for password with Windows Authentication activatet!" 
    Date: Thu, 6 Oct 2005 16:18:40 +0200

    Hi all, can someone confirm this:

    If you start an HTTP session from IE by going to an NTLM protected page,
    then switch to anonymous pages, then IE thinks all requests should be NTLM
    and it will not send the POST body on the first try.
    See http://support.microsoft.com/default.aspx?scid=kb;en-us;251404

    Now, when I set up my website with both 'anonymous access' and 'windows
    integrated authentication' switched on:
    - GET requests are handled directly with a 200 ok
    - POST requests result in a 401, causing a second POST with the body

    This is exactly the behavior that I want.. But can I rely on this to work?
    In other words, is it 'by design' to do 'anonymous' for GET requests and
    NTLM for POSTs?

    Any insight in this is very much appreciated..
    Casper

  • Next message: StoreThomas: "Re: Prompt for password with Windows Authentication activatet!"

    Relevant Pages

    • Performance Problems with Probing
      ... In our application which uses NTLM; .Net always requests a file as ... the last 2 are ANON then NTLM requests for the correct file). ... put a sniffer on the machines - and checked the IIS logs - the CLR has ... course) is always responding by sending a 200 ...
      (microsoft.public.dotnet.framework)
    • Performance Problems with Probing
      ... In our application which uses NTLM; .Net always requests a file as ... the last 2 are ANON then NTLM requests for the correct file). ... put a sniffer on the machines - and checked the IIS logs - the CLR has ... course) is always responding by sending a 200 ...
      (microsoft.public.dotnet.framework.windowsforms)
    • Performance Problems with Probing
      ... In our application which uses NTLM; .Net always requests a file as ... the last 2 are ANON then NTLM requests for the correct file). ... put a sniffer on the machines - and checked the IIS logs - the CLR has ... course) is always responding by sending a 200 ...
      (microsoft.public.dotnet.framework.performance)
    • Re: Performance Problems with Probing
      ... NTLM (and pretty much every authentication scheme except ... the last 2 are ANON then NTLM requests for the correct file). ... > allowing the .Net download cache to do its work. ...
      (microsoft.public.dotnet.framework.windowsforms)
    • Re: Performance Problems with Probing
      ... NTLM (and pretty much every authentication scheme except ... the last 2 are ANON then NTLM requests for the correct file). ... > allowing the .Net download cache to do its work. ...
      (microsoft.public.dotnet.framework.performance)