Re: Copied Website windows authentication not working

Tech-Archive recommends: Speed Up your PC by fixing your registry



Steven,

An absolutely excellent response! Thank you!

Craig

"Steven Cheng[MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:mrF6c2sBGHA.832@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Craig,
>
> Welcome to MSDN newsgroup.
> From your description, you've developed an ASP.NET 2.0 web application
> which use windows authentiation(against domain authority) so as to
> identify
> client users through their domain account. This works well on your
> development box but fails to authenticate the client user after moved to a
> deployment server, yes?
>
> Based on my understanding, when using build-in windows authentcation to
> authenticate client user through windows security authroity in asp.net
> application, it require us to configure the authentication setting in both
> our asp.net's web.config and the IIS's virtual directory....
>
> 1. In web.config, we should set the <authentication> 's mode to "windows",
> I think this should be ok in your application.
>
> 2. In IIS's application virtual directory, the authentication setting can
> be set through the "Directory Security" panel in the IIS
> manager(inetmgr.exe), please make sure that the IIS directory security
> (for our application) is configured as "Integrated windows authentication"
> and "Allow anonymous...." is unchecked....
>
> #How To: Use Windows Authentication in ASP.NET 2.0
> http://msdn.microsoft.com/library/en-us/dnpag2/html/paght000025.asp?frame=tr
> ue
>
> #Configuring Integrated Windows Authentication in IIS 6.0 (IIS 6.0)
> http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5
> f8fe119-4095-4094-bba5-7dec361c7afe.mspx
>
> So I think you can first check the IIS virtual dir's diretory security
> setting to see whether integrated windows authentication is correctly
> configured.... Also, you can use
>
> HttpContext.Current.User to print out the current authenticated user info
> , this can help confirm whether the ASP.NET has correctly obtain the
> client
> windows identity from IIS.....
>
> If there're anything unclear or question, please feel free to post here.
>
> Regards,
>
> Steven Cheng
> Microsoft Online Support
>
> Get Secure! www.microsoft.com/security
> (This posting is provided "AS IS", with no warranties, and confers no
> rights.)
>
>
>
>
>
> --------------------
> | From: "Crash" <crashmeister@xxxxxxxxxxxxxxxx>
> | Subject: Copied Website windows authentication not working
> | Date: Wed, 21 Dec 2005 16:04:13 -0800
> | Lines: 16
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
> | X-RFC2646: Format=Flowed; Original
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
> | Message-ID: <ODsv#soBGHA.1180@xxxxxxxxxxxxxxxxxxxx>
> | Newsgroups: microsoft.public.vsnet.general
> | NNTP-Posting-Host: 65.107.1.240.ptr.us.xo.net 65.107.1.240
> | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
> | Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.vsnet.general:30039
> | X-Tomcat-NG: microsoft.public.vsnet.general
> |
> | Hello,
> |
> | I just used VS2005 to copy a new website to a staging server within our
> | network. The application uses Windows (AD) authentication. On my local
> | development machine, everything works fine, on the staging server,
> | User.Identity.IsAuthenticated does not return true, even though I am
> logged
> | in. I looked at the ASP.NET tab in IIS and it all appears to be correct
> | (but what do I know?).
> |
> | Any help as to why the authentication seems to not be working is greatly
> | appreciated!
> |
> | Thanks in advance,
> | Craig
> |
> |
> |
>


.



Relevant Pages

  • Re: Windows Authentication Access Denied Error
    ... It confirms that the issue has nothing to do with IIS and is specific ... or at least apply different group policies for servers. ... using Windows Authentication. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 5.0 Windows Authenticion/NT Challenge Response
    ... And so IIS returned 400, which says absolutely nothing about your question ... concerning authentication ... "Windows Authentication" works but not Basic or Anonymous. ... to auto-login to the web server, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Directory security - how do I log off a site
    ... This only applies to Basic authentication. ... Tom Kaminski IIS MVP ... "Bernard" wrote in message ... It uses Windows authentication to verify ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS metabase permissions when creating new VirDirs
    ... Are you on IIS 6.0? ... service manager and enable windows authentication - you then run it under ... the authenticated account. ... >> authentication and locking down the script with NTFS. ...
    (microsoft.public.inetserver.iis.security)
  • Re: reading network shared directory
    ... locally using windows authentication on the IIS application then your ... Try switching your IIS application security to basic, ... You can either set up delegation, or use basic authentication on your IIS ...
    (microsoft.public.dotnet.framework.aspnet.security)