IIS Basic Authentication/FormsAuthentication - HELP PLS!?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi everyone,

I am developing a site in which the root will be set with Anonymous &
Basic permissions. Past that I will have an application (directory) in
which I will be developing applications. In the past, I have been able to
use a ISAPI Filter to add the response headers dynamically, and add the
authentication to the request, therefore, allowing users into the secure
directory, and all of this is form based, there is no browser prompt (and it
adds it to every request, images, .htm files, .asp files, etc). Now I am
trying to do this with ASP.NET (VB), again, trying to avoid the browser
prompt, and add the authentication to every request (again, images, .htm
files, aspx files, etc). However, I have been unsuccessful using
FormsAuthentication with the directory set to Basic Authentication. I have
been able to get the FormsAuthentication to set the cookie, but when it
tries to go into the Basic secured directory, I get a browser prompt. Any
help would be greatly appreciated!! (Do I need to write another ISAPI
Filter, can I use FormsAuthentication to do this?? Suggestions?)

I have looked at hundreds of articles (or at least it seems!), and am not
100% how to write an ISAPI filter in .NET, if that needs to be done. Any
pointers to live artices, code, etc. would be very helpful.

Thanks!

Chad


.

Relevant Pages

  • Re: HTTP - basic authentication example.
    ... or *never* knowing the realm..) ... This is called authentication and is implemented ... requests a web page it sends a request to the server. ... consists of headers with certain information about the request. ...
    (comp.lang.python)
  • Re: Each HTTP object being requested twice (401 then 200 responses)
    ... Authentication" and the web.config authentication setting is ... Authorized because the request was made anonymously. ... requests the same object a second time it uses kerberos; ... Kerberos tokens should not be regenerated for every request. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Each HTTP object being requested twice (401 then 200 responses)
    ... Authentication" and the web.config authentication setting is ... Authorized because the request was made anonymously. ... requests the same object a second time it uses kerberos; ... Kerberos tokens should not be regenerated for every request. ...
    (microsoft.public.inetserver.iis.security)
  • Re: HTTP_AUTHORIZATION header
    ... HTML file from one virtual directory, and then immediately execute a CGI from ... Authentication happens when I request the HTML ... header is not expected for every request for NTLM ...
    (microsoft.public.inetserver.iis.security)
  • Re: HTTP_AUTHORIZATION header
    ... I use WFetch to make a Basic authenticated POST request against my CGI EXE ... Nitpick on your stated understanding of authentication protocols - ... header is not expected for every request for NTLM ...
    (microsoft.public.inetserver.iis.security)