RE: Copied Website windows authentication not working



Hi Craig,

Welcome to MSDN newsgroup.
>From your description, you've developed an ASP.NET 2.0 web application
which use windows authentiation(against domain authority) so as to identify
client users through their domain account. This works well on your
development box but fails to authenticate the client user after moved to a
deployment server, yes?

Based on my understanding, when using build-in windows authentcation to
authenticate client user through windows security authroity in asp.net
application, it require us to configure the authentication setting in both
our asp.net's web.config and the IIS's virtual directory....

1. In web.config, we should set the <authentication> 's mode to "windows",
I think this should be ok in your application.

2. In IIS's application virtual directory, the authentication setting can
be set through the "Directory Security" panel in the IIS
manager(inetmgr.exe), please make sure that the IIS directory security
(for our application) is configured as "Integrated windows authentication"
and "Allow anonymous...." is unchecked....

#How To: Use Windows Authentication in ASP.NET 2.0
http://msdn.microsoft.com/library/en-us/dnpag2/html/paght000025.asp?frame=tr
ue

#Configuring Integrated Windows Authentication in IIS 6.0 (IIS 6.0)
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5
f8fe119-4095-4094-bba5-7dec361c7afe.mspx

So I think you can first check the IIS virtual dir's diretory security
setting to see whether integrated windows authentication is correctly
configured.... Also, you can use

HttpContext.Current.User to print out the current authenticated user info
, this can help confirm whether the ASP.NET has correctly obtain the client
windows identity from IIS.....

If there're anything unclear or question, please feel free to post here.

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)





--------------------
| From: "Crash" <crashmeister@xxxxxxxxxxxxxxxx>
| Subject: Copied Website windows authentication not working
| Date: Wed, 21 Dec 2005 16:04:13 -0800
| Lines: 16
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
| Message-ID: <ODsv#soBGHA.1180@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.vsnet.general
| NNTP-Posting-Host: 65.107.1.240.ptr.us.xo.net 65.107.1.240
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.vsnet.general:30039
| X-Tomcat-NG: microsoft.public.vsnet.general
|
| Hello,
|
| I just used VS2005 to copy a new website to a staging server within our
| network. The application uses Windows (AD) authentication. On my local
| development machine, everything works fine, on the staging server,
| User.Identity.IsAuthenticated does not return true, even though I am
logged
| in. I looked at the ASP.NET tab in IIS and it all appears to be correct
| (but what do I know?).
|
| Any help as to why the authentication seems to not be working is greatly
| appreciated!
|
| Thanks in advance,
| Craig
|
|
|

.



Relevant Pages

  • Re: Windows Authentication method on IIS6
    ... The microsoft.public.windows.server.* groups deal with Windows 2003 ... The microsoft.public.inetserver.* groups deal with IIS ... > the authentication button, ... You can configure either one or multiple realm names on a server running IIS ...
    (microsoft.public.win2000.security)
  • Re: How to access Windows IIS User Info with Perl
    ... but the IIS server is configured for Windows ... allowed for Basic Authentication, Windows Authentication (or whatever ... Do you know if they are part of a standard ...
    (comp.lang.perl.misc)
  • Windows Authentication with IIS on separate machines
    ... Yes, setting Basic Authentication in IIS works, but the ... >in SQL server but doesn't work if user account was ... >imported from a Windows account. ...
    (microsoft.public.sqlserver.security)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... IIS Resource Guide). ... I next looked a little into Windows 2003. ... IMHO, the label on the option, "Enable Integrated Windows Authentication", ... the documentation leads one to ...
    (microsoft.public.windows.server.security)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... IIS Resource Guide). ... I next looked a little into Windows 2003. ... IMHO, the label on the option, "Enable Integrated Windows Authentication", ... the documentation leads one to ...
    (microsoft.public.inetserver.iis.security)