I manage a Windows 2008 R2 64bit server running IIS7.5. We have a test website that is accessed using Windows authentication, to keep spiders out of it. (When testing is done, we repoint the live-site to the test folder, then start a new test site.)
My question is, is there another way to secure a site with a single username/password other than Windows authentication?
Warning: Servers are NOT my strong point.
I have satellite internet.
The test site username/password has worked great for years. Then, last Friday, they "upgraded" my satellite account. Now, regardless of browser, it asks me over and over again to authenticate. Smack the return key, and 1-2 seconds later, it's back. If I'm fast enough, I can get most of a page, though it doesn't show up until I finally hit cancel. Takes about 40 usernames and passwords. If I hit cancel sooner, nothing shows up.
I have an idea why this is happening (though the "old" satellite connection worked the same way, and didn't do this): Satellite is accelerated by compressing the data at the NOC, then sending it on to me. If I turn off web acceleration (the compression), the popups go away...but everything slows to a crawl. There are two of us working here with several browser windows open. We can't work when everything is that slow.
If I could run the site in https, that would likely take care of the problem as well, because secure sites don't use web acceleration. But I need the site to be exactly as its going to be when it goes live, and we have switching that turns https on and off.
In Firefox, I tried adding every website that the site accesses to network.*.trusted-uris in about:config, and it will help for JUST a minute...then it's back.
It's possible I just have the authentication set up incorrectly, though it worked prior to my "upgrade", and others can get on the site with other connections.
So I'm really hoping for a simple server based solution that can keep strangers/spiders/indexers out of the site, but will allow me to sign in once.