Authenticate to WSS using Client Certificates

Hi there, apologies if this has been posted before but I can't find any
reference already...

I can't seem to find information anywhere on successfully deploying a WSS
site but using Client Certificates to authenticate and login.

As it stands right now, I have all the certificate stuff in order (root
cert, etc. - we are using client certificates successfully for OWA, etc.).

However, when I enable acceptance of Client Certificates for the WSS site, I
get prompted to choose my cert - which I present and authenticate against.
No errors there but I'm immediately provided by the Basic Authentication
dialog box following the Client Cert.

I tried turning off all other forms of Authentication but after
authenticating with my cert, I get:

"You do not have permission to view this directory or page using the
credentials that you supplied because your Web browser is sending a
WWW-Authenticate header field that the Web server is not configured to
accept. "

and

"HTTP Error 401.2 - Unauthorized: Access is denied due to server
configuration.
Internet Information Services (IIS)"

Please, if you can help and/or direct me to who can, it would be very much
appreciated!


.

Relevant Pages

  • Re: Map to share using certificate rather than login/password?
    ... mapping accounts like this requires a domain and Windows 2000. ... cert that authenticates an entity - it's the private key associated with the ... All the systems need to map to a particular share ... > reside on all the systems that would be used to authenticate rather than ...
    (microsoft.public.win2000.security)
  • RE: Windows Mobile 6
    ... Why is the cert on the endpoint to authenticate ... mobile device based on the fact that the mobile device is trusted due to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: PKI and Relying Parties
    ... > If you're trying to use a cert to authenticate a high-value extranet ... > peer, and you don't want to run your own CA, the safest approach is to ... only" certificates ... ...
    (comp.security.misc)
  • Re: PKI and Relying Parties
    ... > If you're trying to use a cert to authenticate a high-value extranet ... > peer, and you don't want to run your own CA, the safest approach is to ... only" certificates ... ...
    (comp.security.ssh)
  • RE: Implementing SSL on IIS5
    ... You probably don't need client certificates at all. ... The main purpose of SSL ... is to authenticate the server to the clients. ... client certificates authenticate clients to the ...
    (microsoft.public.inetserver.iis.security)