Re: User gets challenged for authentication when opening a documen

David,

Thank you for responding. I appreciate your help as I was not aware that
office would open a new client to view the spread***.

However, I am not sure exactly what you mean by getting the office app to
not request anything from the site. The Excel Spread*** (report) is
generated on-the-fly by the server. Doesn't that, of necessity, mean that
Office must request the document from the server.

Basically, the process is that there is a dll on the server that opens and
excel template, populates it with some data and then returns the "new"
spread*** to the client in a new browser window. Would it make any
difference if we returned the ss in the same browser window from which it is
requested?

Perhaps if we wrote the excel file to some place on the server that has only
HTTP enabled, and then pass the ss from there?

Thanks again for the help you have already provided and, in advance, for any
additional wisdom you can supply.
John Beschler

"David Wang [Msft]" wrote:

I believe that second challenge comes from the Office application (Excel in
this case) because it uses a different HTTP client internally (not your web
browser) with a new HTTP/HTTPS connection and hence subject to that
challenge for username/password from your site. If you can get the Office
app to not request for anything from your site to view the report, you
should not see the challenge.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"John Beschler" <JohnBeschler@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6F16912B-3CC2-42CB-A6B5-CDB01CD5A553@xxxxxxxxxxxxxxxx
WE have a WEB-Based application that (among other things) generates an
excel
spread*** that is returned to the user. The entire site is SSL secured
and
uses NTFS permissions for all pages.

All users must have a domain account to access the site. When initially
entering the site, they are challenged for their domain username/password.
Thereafter, no matter where they go within the site, they are not
challenged
again excpet for this one instance. Whenever they request this aprticular
report (in excel) once the report generates, the user is prompted as to
whether they wish to open the file or save it. Then, they are challenged
again for their domain username/password.

Can anyone explain to me why this is happeneing and how to elimnate the
second challenge. Permissions "should" be the same for the document as
for
the rest of the site.
Thanks,
John




.

Quantcast