Re: Basic Authentication

On Jun 10, 4:22 pm, wcmcalister
<wcmcalis...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Hello all,

I have a c# web application that is supposed to redirect the user to another
website that is basically a black box to me. All I know is that it uses
basic authentication and that when you go to the default page, an
authentication window pops up for you to enter the login and password. In
this case, I know the username and password for the application and little
else.

Our original solution was to simply redirect to the website using this format:
Response.Redirect("http://username:passw...@xxxxxxxxxxx";);

You could a try a server.transer.

This worked fine for awhile, but now IE is no longer allowing this because
it is really insecure (really!).

I have found a few places that indicate that I can add headers to the
response with Base64 encoded loginID and passwords. This doesn't seem to be
working at all for me. It's like I'm not passing anything at all.

I dont think the headers idea would work because your client would
have to initial the request.

Does anyone out there have any ideas?

Thanks,
Bill

PS, I know that basic authentication is really insecure. Unfortunately,
this isn't my application and I can't rewrite it.

.

Relevant Pages

  • Capital Ones website inadvertently assists phishing
    ... Capital One's website has an unchecked redirect. ... > regularly screen the Capital One Bank system for unusual activity. ... To protect the security of your account, ...
    (Bugtraq)
  • Re: Network/Routing Question
    ... Since I am unsure of a way to install OWA to another website, ... I've killed OWA and SBS doing so. ... If your *default* website use remote.domainname.com, and you are thinking of adding a header to the default website then no, this cannot be done. ... And if you create a new site and add a header then you still have to make the default site accessible for the redirect. ...
    (microsoft.public.windows.server.sbs)
  • Re: redirect URL
    ... I had a somewhat similar problem but my websites were on the same server. ... open the properties screen for that website and click the Home Directory ... "Redirect to:" where you fill in the domain part of the URL that you want to ... $V is a redirect variable and I believe the help in IIS 5 is not working ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Driving a website using VFP
    ... URL, if you're using basic authentication, e.g. ... > Further to the IE automation stuff above, ... > without user intervention. ... >> In another section of the program, I want to log onto another website, ...
    (microsoft.public.fox.programmer.exchange)
  • Re: Integrated windows authentication problems
    ... Post the relevant logon failure events here (if you open the event, ... Basic Authentication enabled at the same time when you want to test Basic. ... Recently I created a website that uses Integrated Windows Authentication ... NOTE: frontpage server extensions gave ...
    (microsoft.public.inetserver.iis.security)