Re: IIS 6.0: Windows authentication across virtual servers

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 02/19/04 

Date: Thu, 19 Feb 2004 00:48:13 -0800

If you're using Integrated authentication and both servers and users are in
the same (or cross-trusted) domain, there shouldn't be any dialog box as IE
will take care of the auto-logon (unless configured to not do it).

There is a big difference between IE auto-login and "Pass-thru"
authentication. The former is pretty implicit since you directly control
the browser to give authentication. The latter requires the concept of
"delegation" where you, the user, must delegate to the website (controlled
by someone else) the ability to act as YOU (and not the website) while
accessing another website. Delegation is a pretty trusted operation.

So, I'm confused by your terminoligy of "Virtual Server" -- are you talking
about two websites on two different physical servers, or just two different
websites one one physical server.

WSS and ASP.Net both have custom authentication solutions, and I think that
they are not compatible with each other, so you want to make sure you're not
in that case, too. 

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Michael Barrett" <mbiwj001@sneakemail.com> wrote in message
news:eFncKtr9DHA.1672@TK2MSFTNGP12.phx.gbl...
We are currently running two web applications on two different virtual
servers. One of them is Windows Sharepoint Services, and the other one is
also based on ASP.NET. Both of these applications use windows authentication
to authenticate the users.
Often the users need to go directly from Windows Sharepoint Services (via a
hyperlink) to the other ASP.NET-application. However, when they do, they are
required to enter username and password again (even though they had already
been authenticated on Windows Sharepoint Services). Is there any way to
"pass-through" the authentication between the two applications (which reside
on two different virtual servers) provided that it takes place within the
same browser session.
Thanks in advance...
-- 
Michael Barrett

Relevant Pages

  • Re: website alias frontend
    ... website, thus no reason for authentication. ... the site using this front-end script is basically accessing ... > these servers. ...
    (comp.lang.php)
  • Re: OT - Anyone here use SBC DSL with Free Agent?
    ... I've gotten many "authentication required" msgs as well as ... requiring authentication for use of its news servers. ...
    (rec.roller-coaster)
  • Form Authentication Across Web Servers
    ... I have a two ASP.NET2.0 Web applications which are published/deployed ... on two different servers. ... Users of these website can switch between these website as per ... Form authentication is being used to authorize user. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Authenticating mixed clients for Internet Access
    ... user authentication with samba PDC. ... look into the winbind suite of samba and give some ACL ... but it is the Internet access control ... > Linux and NT servers. ...
    (Security-Basics)
  • Re: authenticating users from different domains
    ... the concept of RADIUS servers ... you have several independent authentication networks. ...
    (microsoft.public.windows.server.security)