Re: An outside client can't access our WSS website

All the recommendations that I now are that if you have outside customers
they need to be using Basic Authentication. This doesn't mean you must have
SSL just that you would be very wise for security reasons to use it (because
of the in clear nature of Basic Authentication as I'm sure you know)

Another way would be for you to allocate them names and passwords as local
users on the server. I use that with the firewall set up to restrict access
to anything but accesses coming from the address of the particular outside
user.

You might consider that approach. Whether it i less or more secure I don't
know.

Mike Walsh, Helsinki, Finland
WSS FAQ at http://wss.collutions.com
Please post questions to the newsgroup only.


"Tom Watson" <TomWatson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7E493D88-B8AA-4506-8FDC-7CE7E5629A78@xxxxxxxxxxxxxxxx
> We are using "Integrated Windows Authentication", as it is shown in IIS.
> (sorry for the mixed terms)
>
> Users other than site owner are only in "Domain Users" on the server.
>
> It is only a handful of outside sites that need access to our WSS site. We
> would prefer to help them change their configuration rather than we change
to
> Basic etc. if the issues are simple... We could go to basic but would
prefer
> to not incurr the performance hits of ssl and certificates.
>
> As far as we know they are not using proxies.
>
> "Mike Walsh" wrote:
>
> > Check what kind of clients they have.
> >
> > Pedantic (but relevant) question: Are you using "Basic Authentication"
or
> > "Windows Authentication"? (You say "Basic Windows Authentication")
> >
> > Mike Walsh, Helsinki, Finland
> > WSS FAQ http://wss.collutions.com
> > please reply to the newsgroup only
> >
> > "Tom Watson" <TomWatson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:1FF9FBE6-CF07-467A-88C1-5FBFB2F88075@xxxxxxxxxxxxxxxx
> > > One client can't access our website from their company office. There
are
> > > no
> > > problems accessing our site from sever other outside locations.
> > >
> > > Their company network(the outside location with the problems) is built
on
> > > Windows Server 2003 with exchange server...all up to date.
> > >
> > > Here are the detailed sypmtoms when they try to login:
> > >
> > > User goes to site which prompts for username password
> > >
> > > They are prompted again for un pw etc. multiple times
> > >
> > > Sometimes graphics will load one at a time after each un pw iteration
like
> > > the site is requiring authorization for each graphic part of the
website
> > >
> > > Sometimes we can get all the way to the home page but every new action
> > > brings up a new authentication window
> > >
> > > As I mentioned these symptoms only occur at this one site. The site
is
> > > accessed normally from all other sites we have tried.single
authentication
> > > dialog gets the user in and they are good from then on.
> > >
> > > We are using basic Windows authentication on our WSS server...no SSL
or
> > > Certificates.
> > >
> > > Any ideas?
> >
> >
> >


.

Relevant Pages

  • BASIC authentication Issues with IE
    ... quarks has either gotten worst or Microsoft is now forcing some behavior ... to try to understand Microsoft's variant BASIC Authentication ... When you use explorer to open the C:\ root folder, ...
    (microsoft.public.inetserver.iis.security)
  • Re: HTTP_AUTHORIZATION header
    ... With Basic authentication, ... I use WFetch to make a Basic authenticated POST request against my CGI EXE ... Nitpick on your stated understanding of authentication protocols - ...
    (microsoft.public.inetserver.iis.security)
  • RE: Name mapping : 1 certificate, multiple user accounts
    ... If you have Basic Authentication disabled in IIS, ... Integrated authentication will prompt if the prerequisites for transparent ...
    (microsoft.public.inetserver.iis.security)
  • Re: Connecting to AS 2005 using a specified user
    ... If you use MSOLAP.3 to connect to an AS 2000 server over HTTP, ... Basic authentication credentials. ...
    (microsoft.public.sqlserver.olap)
  • Re: SSL & Basic Authentication
    ... authentication, how does Basic Authentication with SSL using a 1024 bit key ... Some pages are configured to use Basic Authentication; ... You need to first define your security threshold and tolerence before ...
    (microsoft.public.inetserver.iis.security)