Re: IIS 6.0 and Word Authentication???

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 04/28/04


Date: Wed, 28 Apr 2004 15:23:43 +1000

This is a educated guess, since I don't have time to test it at the moment:

Probably because when you open the file, it is opened in a Winword.exe
process. When you close the file, winword.exe is shut down. Since this is a
separate process, any cached credentials are lost when the process is
terminated. The same thing happens if you use IE to access, say, a protected
HTML document. When you close all your IE windows, and return to that
document, you need to enter your user credentials again. Cached credentials
can not (and should not) be shared across processes otherwise a malicious
process could easily steal credentials from privileges processes running on
your machine.

I don't believe this has anything to do with NTFS permissions configured on
the server.

: ... why oh why does Microsoft file system rights have to be such a pain?

They're not a pain. You just don't understand them. That's not intended as
criticism. Just don't malign things you don't have a good grasp of. Whether
or not the document exist on a *file share* is irrelevant to accessing a
document over HTTP. The only things that are relevant are whether you are
requiring some auth mechanism in IIS, and what the NTFS permissions are on
the resource. File shares are irrelevant to the question.

Cheers
Ken

"Matt Merrell" <mmerrell@phd6.state.id.us> wrote in message
news:53ed01c42cdc$c43f3340$a501280a@phx.gbl...
: Because it shouldn't. The file is on the website, you
: open it and close it (not making any changes) and bam it
: asks for a username / password, after you have closed the
: word file. It ONLY does it on Word, nothing else.
:
: I have been playing with a test server and it seems to
: possibly be a bug with doing a share on a folder located
: in the wwwroot folder... sigh... why oh why does
: Microsoft file system rights have to be such a pain?
:
: Anywhoo, I'm doing some more testing tomorrow.
:
: Merrell
:
: >-----Original Message-----
: >
: >Why would you not expect it to prompt you for
: authentication? Check:
: >Internet Explorer May Prompt You for a Password
: >http://support.microsoft.com/?id=258063
: >
: >
: >Cheers
: >Ken
: >
: >
: >"Matt Merrell" <mmerrell@phd6.state.id.us> wrote in
: message
: >news:eX2O4nJLEHA.3300@TK2MSFTNGP10.phx.gbl...
: >Hi all,
: >
: >On my Win2K3 server and a clean install of IIS 6.0, when
: I open a Word
: >document on the website, it prompts me for
: authentication until I turn the
: >Integrated Windows Authentication off... and that of
: course breaks my
: >ability to author the website... sigh...
: >
: >Anyone else having this problem? It doesn't happen on
: any other file type.
: >Just Word, and I have been able to reproduce the
: behavior multiple multiple
: >times.
: >
: >Please help!
: >
: >Thanks so much,
: >
: >Merrell
: >
: >
: >
: >
: >Hi all,
: >
: >On my Win2K3 server and a clean install of IIS 6.0, when
: I open a Word
: >document on the website, it prompts me for
: authentication until I turn the
: >Integrated Windows Authentication off... and that of
: course breaks my
: >ability to author the website... sigh...
: >
: >Anyone else having this problem? It doesn't happen on
: any other file type.
: >Just Word, and I have been able to reproduce the
: behavior multiple multiple
: >times.
: >
: >Please help!
: >
: >Thanks so much,
: >
: >Merrell
: >
: >
: >.
: >



Relevant Pages

  • Re: IIS 6.0 and Word Authentication???
    ... The file is on the website, ... >Internet Explorer May Prompt You for a Password ... >Integrated Windows Authentication off... ...
    (microsoft.public.inetserver.iis)
  • Re: IIS, Integrated Windows Authentication, Intranet, Disable Prompt?
    ... Believe it or not, IIS always send the ... > Using Integrated Windows Authentication. ... not prompt the user for a user-id. ... > Microsoft Internet Explorer, version 2.0 or later. ...
    (microsoft.public.inetserver.iis.security)
  • Integrated Windows Authentication, Change IEs Reaction to a 401.3
    ... Using Integrated Windows Authentication on a Windows 2000 Server ... way to eliminate the login prompt that IE generates following an ... IIS generates 401.3 and IE reacts by displaying a login ...
    (microsoft.public.inetserver.iis.security)
  • RE: Integrated Authentication
    ... Your understanding about how Integrated Windows Authentication is right. ... external site and prompt you for credentials again. ... Microsoft Developer Support ...
    (microsoft.public.inetserver.iis.security)

Quantcast