Re: Difference in authentication between using IP address and DNS name

From: Bob McCoy [MSFT] (bobmccoy_at_online.microsoft.com)
Date: 12/17/04


Date: Fri, 17 Dec 2004 07:50:15 -0600

There are a couple of things that could be happening:

1. The host name may resolve to a different address. That's easy enough to
check. "nslookup site.domain.com" will show you the address your system is
resolving the name to. You can also get that via "ping site.domain.com".
If the address is the one you expected (10.1.1.1), you can eliminate this as
the problem. Otherwise, a) you have the wrong name for the site, or b) the
DNS admin has the wrong address for the site.

2. The other thing that could be happening is if the web server uses HTTP
Host Headers. In this scenario, multiple web sites can use the same IP
address. The web server at the time of the request examines the requested
site name and sends back that content as if it exclusively owned that
address. So the scenario may play out something like this ... if you send a
request to 10.1.1.1 you would get the default content for that server (which
may not offer anonymous access), but if you send the request to
"site.domain.com" you would get its content instead.

-- 
Bob McCoy
* This posting is provided "AS IS" with no warranties, and confers no
rights.
* Please note I cannot respond to email questions. Please use these
newsgroups.
"Technical" <technical@news.postalias> wrote in message 
news:2A4A8D96-C74D-4B2E-A409-693245847D44@microsoft.com...
> Can anyone point me in the right direction to understand this problem.
> What is the difference between accessing a web-site, POP /smtp email
> account, or network share using the IP address (10.1.1.1) vs it's DNS name
> site.domain.com.
>
> We have a web site that if you browse to it using 10.1.1.1 it will ask you
> for a username and password. If you browse to site.domain.com, you get 
> access
> without being prompted for username.
>
> Another problem, In outlook if you put your smtp and pop3 addresses as IP
> addresses, you get access everytime with no problem (username & password
> saved). If you use the fully qualified name, it does not let you access. 
> And
> this is different pc to pc.
>
> There is probably a white paper somewhere that explains it all.
> Thanks, 


Relevant Pages

  • RE: www.google.com reference in directory-traversal attack
    ... A web server might be host to multiple sites, ... on the request allows the client to specify which one he wants. ...
    (Incidents)
  • [OT] DNS resolutions (was Re: R.I.P., Penance)
    ... Virtual hosts require the hostname in the HTTP GET request - the IP ... Those are just two of the domains I host on my shared server, ... notice they both resolve and trace to exactly the same IP. ... http://www.dravensdungeon.com/dravensdungeon/foo/bar.html -- retrieves ...
    (rec.games.roguelike.angband)
  • The server committed a protocol violation
    ... My web server has both NTLM and Basic authentication. ... application can access the web service without any problems. ... Host: 150.158.204.40 ... Request -> ...
    (microsoft.public.dotnet.framework.webservices)
  • The server committed a protocol violation
    ... My web server is a Windows CE 4.2 device ... application can access the web service without any problems. ... Host: 150.158.204.40 ... Request -> ...
    (microsoft.public.windowsce.embedded)
  • The server committed a protocol violation
    ... My web server is a Windows CE 4.2 device ... application can access the web service without any problems. ... Host: 150.158.204.40 ... Request -> ...
    (microsoft.public.dotnet.framework)