Re: What is a local logon?

From: Herb Martin (news_at_LearnQuick.com)
Date: 03/30/04 

Date: Mon, 29 Mar 2004 21:06:18 -0600

> : That's what I said. Digest is similar to basic, except for the
protection
> : of the password.
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> Um, no. You said Basic and Digest are the same. I'm saying "isn't Digest
the
> same as IWA"?

Sorry, I must have misread what you wrote but then the next paragraph
confuses me again....

> With Digest, IIS has the username and password. With IWA IIS only has the
> username.

Right, and with Basic, like Digest, IIS has both username and password but
not
pre-authenticated credentials which is really what IWA gets (yes, the user
is in
there, but as the SID.) 

-- 
Herb Martin
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:urYNQHTFEHA.3404@TK2MSFTNGP10.phx.gbl...
>
> "Herb Martin" <news@LearnQuick.com> wrote in message
> news:%23HKR8AOFEHA.1268@TK2MSFTNGP12.phx.gbl...
> : > : BASIC (and digest) is always a local logon -- you hand your username
> : > : and password to the web server which logs on as the you (locally.)
> : >
> : >
> : > I thought Digest Authentication worked the same way as IWA. With
Digest
> : you
> : > hand your username, and a hash of your password to IIS. IIS passes
this
> to
> : > the Domain Controller. DC performs the same hash, and determines
whether
> : the
> : > hash matches the one stored in AD. If they match, appropriate token is
> : sent
> : > back to IIS.
> :
> Cheers
> Ken
>
>

Relevant Pages

  • Re: How to troubleshoot 401 error when connecting using NetworkCredent
    ... digest auth only works against domain accounts by default - ... the same result when connecting to a WebService hosted in IIS. ... If I configure my client to use explicit credentials as follows: ... digest authentication, then everything works. ...
    (microsoft.public.dotnet.security)
  • Re: What is a local logon?
    ... You said Basic and Digest are the same. ... IIS has the username and password. ... With IWA IIS only has ...
    (microsoft.public.windows.server.security)
  • Re: What is a local logon?
    ... :> I thought Digest Authentication worked the same way as IWA. ... and a hash of your password to IIS. ... IIS has the username and password. ...
    (microsoft.public.windows.server.security)
  • Digest or integrated authentication failure
    ... Isolated domain to run IIS and Sharepoint service sites ... XP workstations = Digest and Integrated Credentials work fine ... 2003 Servers = Digest and Integrated Credentials work fine ...
    (microsoft.public.inetserver.iis.security)
  • Re: Manual hashing
    ... No such claim appeared in my posts. ... As usual with hash functions, ... digest is shorter than the message. ... I spoon-fed the detailed steps to find preimages of any hash. ...
    (sci.crypt)