Re: Windows 98 user can be authenticated using BASIC / Integrated Security

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 05/07/04 

Date: Fri, 7 May 2004 01:50:36 -0700

I thought that Win9x needs an add-on AD-client to support NTLMv2 and access
to Active Directory (or something of the sort). For example, Win9x clients
cannot access a Windows Server 2003 UNC share without the client installed.

Otherwise, a 401.3 indicates that IIS did log on as SOME user for that
request, but the user was denied access by ACL to the resource.

If you only have Basic enabled (and anonymous is disabled) and get 401.3, it
means the user login is working... but the logged in user doesn't have
access to the requested resource. If you want to see what user was logged
in, use Network Monitor or any other network trace program and grab the
"Authorization: basic" header sent by the client to the server and Base64
decode it to uncover the username:password that the client is passing to the
server over Basic authentication. 

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Nick Wright" <anonymous@discussions.microsoft.com> wrote in message
news:2822BDBE-6B01-41B7-A43D-B5897A3CF45C@microsoft.com...
Hi,
Yes, tried all methods of authentication I get no logon prompt when the site
is access from a W2k machine, but still no access for a Windows 95 / 98
user...
These users are definately on the same domain as the w2k users, in the AD I
can see no diference between the two types of users i.e. w2k and win 98
Regards

Relevant Pages

  • RE: verify HTTPS vulnerabilities
    ... the client is the one that tells the server first ... cipher suite combinations, which is what the Nessus script is probably doing ... The basic authentication thing also looks interesting. ...
    (Pen-Test)
  • Re: How to redirect headers in Perl?
    ... > server and make it stick on a client, I am still interested for future ... basic authentication works roughly like this ... auth info to all subsequent pages in session to same server ...
    (comp.lang.perl.misc)
  • Re: What doesnt lend itself to OO?
    ... >> proxy and instructs the server to constuct the real object. ... rather than client code. ... If 'clock' is instantiated in the server, ... > for the server interface at the OOA level. ...
    (comp.object)
  • This is going straight to the pool room
    ... or not the client has privilege to do what they're trying to do, ... The server environment is this: ... 3GL User action Routines that Tier3 will execute on your behalf during the ... Routine Name: USER_INIT ...
    (comp.os.vms)
  • [Full-Disclosure] R: Full-Disclosure Digest, Vol 3, Issue 42
    ... Full-Disclosure Digest, Vol 3, Issue 42 ... SD Server 4.0.70 Directory Traversal Bug ... Arkeia Network Backup Client Remote Access ...
    (Full-Disclosure)