Re: Authentication

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 05/04/04 

Date: Tue, 4 May 2004 13:38:41 +1000

Sorry for not being clear. The user's browser (whether by the user entering
information, or the browser sending it automatically), must supply a domain
name as part of the credentials. IE, when it is configured to "autologon",
sends the credentials of the currently logged on user. If the user logs onto
the machine (rather than the domain), then IE will send Machine\User not
Domain\User.

What domain the webserver is in is largely irrelevant. If the user does not
supply a domain, then the webserver will attempt to authenticate against the
webserver's local user accounts database (which seems to be the problem you
are having). Hence, my original comment, the user must supply a domain name
as part of their credentials.

Possible Scenarios to explain behaviour:
* Suppose a user account doesn't have access to a resource. After IE attempt
to autologon, the webserver will send back Not Authorized. User is prompted
to supply credentials. User omits Domain name. IIS looks in local user
accounts database.

* User attempts to access webserver by IP address or FQDN (rather than
http://server). Since this isn't part of the Intranet zone by default, IE
does not autologon, but pops up a credentials prompt. User omits domain
name. IIS looks in local user accounts database.

Cheers
Ken

"Kirk Bay" <anonymous@discussions.microsoft.com> wrote in message
news:0D2D5050-DBE7-4BDE-8F08-453F888B9B8E@microsoft.com...
: Nobody is supplying anything and it works fine on 99% of the clients. The
web server is part of the same AD domain that all the clients reside in. I
think that if the client IE is configured correctly it should pass the
correct credentials (domain/uid). Isn't this correct?

Relevant Pages

  • Re: Code runs until Basic Authentication or Digest Authentication is r
    ... the client always need to supply the ... | Subject: Re: Code runs until Basic Authentication or Digest ... | Supplying a username/password in web.config does not mean that the user ... | doesn't supply credentials. ...
    (microsoft.public.inetserver.iis.security)
  • Cached Password Issue???
    ... They are supplying the correct credentials ... logon, which they get prompted to do, however they still ... shares if I supply the same credentials however. ... Windows cannot query for the list of Group Policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Code runs until Basic Authentication or Digest Authentication is r
    ... Supplying a username/password in web.config does not mean that the user ... doesn't supply credentials. ... Do you want the user to have to authenticate (i.e. supply Windows ... Have an application that creates ASPX session variables based on values ...
    (microsoft.public.inetserver.iis.security)
  • Re: XP Domains
    ... >>It can access individual resources on the domain, ... > supplying the ... > Could you tell me how to supply credentials please Bob? ...
    (microsoft.public.windowsxp.network_web)
  • Re: Kerberos logon failure - Windows Server 2003 RTM
    ... I cannot log in manually with the created user accounts and thats ... When I call the WindowsIdentity constructor I supply the user ... > Have you tried logging on manually to see if that works? ... > Also are you supplying the password to the WindowsIdentity constructor or ...
    (microsoft.public.win2000.security)