Re: Integrated Windows Authentication

"vx" <vx@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:78FEF025-F48C-4CB7-BA19-16D1F1EFF187@xxxxxxxxxxxxxxxx
Thanks you very much for your help!
a new question:

What is the authentication mechanism for sending the credentials
from the client machine to IIS ?

There is no single way of doing this. The HTTP specification permits the server to send back supported authN mechanisms via the use of WWW-Authenticate: headers (e.g.

WWW-Authenticate: Basic

(to show that the server supports Basic Authentication). The client would send credentials back using an Authorization: header

But it's also possible to send credentials via a HTTP form (e.g. ASP.NET forms based authentication or similar). In this case access is anonymous at the HTTP layer, but authentication occurs within the application layer. Alternatively you can use client certificates to authenticate users - in this case authentication data is sent as part of the SSL/TLS handshake that occurs even before HTTP headers are exchanged (i.e. below the HTTP layer).

So there are many ways to authenticate clients to the server. The KB article is talking about HTTP-based authentication.

Cheers
Ken

.

Relevant Pages

  • Re: Windows Authentication, Single sign on and Active Directory
    ... service proxy client fails to connect due to authentication failure and then ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The server is always in the domain. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: BASIC authentication Issues with IE - Part II - Solved but WHY?
    ... it does not know the difference between a request from IE or from ... some other HTTP client. ... Some other authentication schemes are more ... IIS can sometimes remember the token for a particular set of credentials so ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows Integrated Auth/Basic Auth
    ... Both Basic and Windows Integrated authentication save their credentials on ... you need to convince the client browser to ... >> Windows Authentication on my web app to give an access ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Sporadic IAS Authentication problems
    ... * Some times however, a physical reboot of the client laptop is required, ... *The remote access policy in IAS is set to grant access to the group 'Domain ... Proxy-Policy-Name = Use Windows authentication for all users ...
    (microsoft.public.internet.radius)
  • Re: WCF security advice (and clarification) needed
    ... You, the client, resolve the foo.mycompany.com hostname within your ... TCP/IP) with that ticket as the security token. ... There are two parties participating in a security scenario, the server ... HTTP supports other authentication ...
    (microsoft.public.dotnet.framework.webservices)