Re: Intranet Authentication for a webapp

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Look at integrated authentication. You might find the IIS and PHP groups
are able to provide a lot more information. Integrated authentication uses
either Kerberos or NTLM. That is, the domain credentials are used. In
conjunction with IE settings, you will get pass-through authentication that
should mean you are not prompted for credentials.

There's quite a lot to this subject, so I recommend a little reading and
then more precise questions.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.

Relevant Pages

  • authentication problem: IIS6, custom app pool identity, integ auth
    ... We're having some problems with integrated authentication in IIS6, ... WEBUSER is trusted for delegation (to any service, Kerberos only) ... Event log shows that WEBUSER uses the IUSR account's ... credentials and logs in successfully with a logon type of ...
    (microsoft.public.inetserver.iis)
  • Re: NTLM over the Internet
    ... It's also not recommended because 1) windows integrated authentication is ... and 2) it only works for IE and only on Windows. ... The reason given is that ntlm ... I've setup a test server using ntlm over ...
    (microsoft.public.inetserver.iis.security)
  • Kerberos and ASP NET application
    ... First time poster to this group,and this is my first experience ... looking into the intricacies of Kerberos. ... NTLM and the SQL server won't let them in (ERROR message ... client is IE7 on Win XP SP2 - and enable integrated authentication ...
    (microsoft.public.inetserver.iis.security)
  • Re: IE to Support LDAPUPN or just NTLM?
    ... IE already supports the negotiate protocol for integrated authentication ... which supports both Kerberos and NTLM. ... There is no LDAP ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Exchange 2000 and .NET
    ... If your using the samples from the SDK they are setup to use NTLM ... (Integrated Authentication) ... If your using basic authentication over SSL you'd need to change NTLM to ...
    (microsoft.public.exchange2000.development)