Re: IIS 6.0: Windows authentication across virtual servers
From: Jims (biz_at_neocasa.net)
Date: 02/25/04
- Previous message: Steen Schjellerup: "Re: Record Layout of Windows Security Event log records ?."
- In reply to: Michael Barrett: "Re: IIS 6.0: Windows authentication across virtual servers"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 25 Feb 2004 10:36:16 -0500
This may be more of an IE problem than an IIS or asp issue. By default IE
will only pass user credentials to a web server if it believes the server is
on the intranet (short name only, example: http://server NOT
http://server.domain) or if the server/domain is defined as trusted in
Tools|Security|(select Local Intranet)|Sites|Advanced settings. Typically,
passing IE a URL with a fully qualified name such as
http://thedomain.hosting.dkr.dk/ will prevent credentials from being passed
to the IIS server unless the domain has been explicitly added to the
intranet security settings specified above. It has nothing to do with
authentication communication between virtual webs.
Jim
"Michael Barrett" <mbiwj001@sneakemail.com> wrote in message
news:OsFHgAF%23DHA.2404@TK2MSFTNGP11.phx.gbl...
> >
> > In your case, you are completely depending on IE "pre-authenticating"
for
> > you, so what are example URLs for accessing your WSS and ASP.Net
> > websites...
> > because it affects whether IE will "pre-authenticate" for you or not.
> >
>
> I must admit that this is not known territory for me. I appreciate the
help.
>
> Example URL for WSS-site: http://portal.mydomain.dk
>
> Example URL for "other" ASP.NET application:
> http://thedomain.hosting.dkr.dk/application
>
> It makes sense to me that even if the two web sites reside on the same
> physical server, based on the URLs there is no way for IE to know this...
> Does this mean that I cannot have IE "pre-authenticate"? If not, is there
a
> workaround for my problem?
>
> --
> Michael Barrett
>
>
- Previous message: Steen Schjellerup: "Re: Record Layout of Windows Security Event log records ?."
- In reply to: Michael Barrett: "Re: IIS 6.0: Windows authentication across virtual servers"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|