Re: Multiple Login Prompts Opening MS Documents



It would essentially be a filter that resides in front of the WSS ISAPI
filter (STSFLTER.DLL) that does some witchery regarding persitant
authentication and others because you can trigger several other events, such
as calling other managed code by using the COM Interop features.. But to
answer your question VC++ is a language.

Adam Buenz
http://www.sharepointsecurity.com



you can also then

"Tom Martell" wrote:

Thanks for the info on SPS. I think you indicated that you performed a
workaround using VC++ filter. Don't know what that is could you please
explain.

Tom

"Engelbert" wrote:

As far as I know SSO is only available with SPS 2003.

Engelbert

"Tom Martell" <TomMartell@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:719A720C-9EA5-4B12-ADE5-300715031B88@xxxxxxxxxxxxxxxx
Two questions:
1) Can I also implement SSO on our WSS Extranet Site that was set up for
AD
authentication?
2) What the heck is a VC++ filter. Could you please explain the second
sentance I'm clueless. :)


"adam@xxxxxxxxxxxxxxxxxxxxxx" wrote:

you have to deal with it, there is no way around it because the user
token
can't be passed to the local office app using Basic authentication. The
only
way that I have gotten around it was to use a VC++ filter in front of WSS
that kept the credentials persitant, however there is no way to make it
work
with configs.

Adam Buenz
http://www.sharepointsecurity.com

"Tom Martell" wrote:

Our WSS site use Basic Authentication since we are located in several
domains
and access from hotels etc. When opening MS Office documents we get
prompted
for a login for every document requested. Integrated Authentication
only
fixes the problem inside the domain where the SharePoint server is
locate on
our AD domain, but does not allow folks outside the domain to access
the WSS
Site.
So when using Basic Authentication, every modification to IE does not
work
e.g. add to local intranet zone, User Authentication, Automatic Logon
to
Intranet Zone.
Modification of the htmltraninfo.xml file does not work.
Adding UserTokenTTL in registry does not work.
Changing word settings for documents to This document is part of
workspace
oor SharePoint site does not work.

Any ideas?



.



Relevant Pages

  • Re: ISAPI Authentication
    ... Authentication and an ISAPI filter. ... Authentication with an anonymous user, ... encrypt the credentials before the client returns the ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISAPI Authentication
    ... The job of your authentication filter is to accept ... non-Windows credentials from the client and then map them to a Windows ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISAPI Authentication
    ... There are lots of ways to implement authentication filters on ISAPI. ... Your filter can then change them to whatever username ... client will be sent in the clear. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISA 2004 HTTP Filter
    ... NTFS security will not help in this case, ... The problem is that I need to filter only the part with the domain name ... I want to allow authentication only with a user from a specific domain, ... The easiest way to achieve this if you're using IIS would be to leave ISA ...
    (microsoft.public.isa)
  • Re: MOSS2007/WSS 3.0 Installation/Configuration Problems
    ... At work the WSS v3 worked without issue. ... Authentication ... Is there some way to figure out if the ASP.NET membership is the cause ... try a clean install this afternoon. ...
    (microsoft.public.sharepoint.windowsservices)