0
votes
0answers
19 views

Can't match up timeout of session and forms authentication in IIS 6

I've got a site running on IIS6. The session timeout in web.config is set to 720. The forms authentication timeout in web.config is set to 720. I'm using SQL Server session state. Despite this, I ...
0
votes
1answer
193 views

IIS / kerberos not prompting for credentials from Mac clients

I have an IIS server (Server 2008R2/IIS 7.5) configured for kerberos authentication. The kerberos authentication works from clients on Windows (IE and Opera both tested), but when I access the site ...
1
vote
0answers
156 views

IIS using ADFS/Saml to Authenticate

Does anyone know if there is a ADFS/SAML Identity Provider for IIS7? Example workflow - the user will go to the directory /private and it will redirect to the provider to login and back if the user ...
0
votes
1answer
180 views

IIS7 - Restrict access to an intranet site to a specific group of users

I have an ASP.NET site running in IIS7 on a local intranet. I want to restrict access to this site to a specific group of users. I think I should be able to do this by using Windows Authentication ...
1
vote
1answer
72 views

How to secure a single file download over HTTP on IIS?

I want to create a download link to a file on my HTTP server (IIS 7.5), for a one time secure download purpose. I don't want the file to be publicly available, the receiver must authenticate. When ...
1
vote
1answer
74 views

Kerberos using app pool credentials

I have the following setup: ServerA, a web server with an asp.net mvc site ServerB, a web server with an asp.net Web Api service The MVC site on ServerA consumes the Web Api service on ServerB. ...
0
votes
0answers
29 views

Securing files on IIS 7 and Windows Server 2008 Server

What's the best practice for securing a file on an IIS 7 web application running on Windows 2008 server? I have the following requirements and ideas: Requirements: A authenticated user to my web app ...
0
votes
1answer
389 views

IIS 7.5 - Authentication works with IP Adress but NOT with FQDN

I'm using an IIS Server and run into the following problem: Using Internet Explorer, I type http://1.2.3.4/mySite/ and everything works fine, it uses my Windows credentials. When I try ...
0
votes
0answers
118 views

IIS and ASP.NET and UNC path problems

So, I have a very old classic ASP site which uses some VB6 dll to do some "stuff". one of the things is to search for files in a directory and then some other operation things with that file. The old ...
0
votes
1answer
55 views

IIS not serving static or dynamic content

I am trying to load: http://localhost and http://localhost/folder/page.html and http://localhost/folder/page.php and I just get the hour glass showing that it is loading, but nothing ...
2
votes
1answer
905 views

What determines the combination of ciphers available on an SSL server?

I have a site that has been bound to a new SSL certificate with SAN (4 additional names). The certificate has a 2048-bit key. The problem is that it works on some browser/OS combinations but not on ...
1
vote
1answer
60 views

Better IIS error tracing

I'm running a Confluence instance behind an IIS proxy. Now we have some issues with user authentication. Right now the only thing I can see is the request and a 401 response. However I can not see ...
0
votes
1answer
66 views

IIS: selective access to folders

Site MyGreatCompany.com is served by an IIS webserver through SSL and basic authentication. The root directory and all subdirectories should be accessible to every authenticated user, except for ...
2
votes
4answers
2k views

Using WSUS Admin Console from outside domain

Environment: I have a workstation on our primary domain. We have a primary WSUS Server that is the upstream server of 8 different testing domains. The Primary WSUS server is not part of any domain. ...
1
vote
0answers
146 views

Modifying Authentication on web application / service in IIS(7/.5) via Powershell

I am trying to install a wcf-servce by using New-WebApplication in powershell. It works fine. However, how can I Modify the Authentication? I want to enable Anonymous Access Authentication and disable ...
1
vote
0answers
57 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
1answer
213 views

Enable basic authentication in IIS for remote requests, but not for local ones?

Is there a way in IIS to enable basic authentication for remote requests while leaving the website open for local requests? I need external users to authenticate to access a site, but users on the ...
3
votes
4answers
11k views

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5 and I couldn't find any answer to this question, can help me a ...
0
votes
1answer
759 views

Configure anonymous authentication to use app pool identity for a specific site

Instead of flipiping the switch in the GUI to tell IIS to use the Application Pool Identity for Anonymous authentication, I'd like to do this in a powershell script. Scott Forsyth posted a solution ...
2
votes
1answer
2k views

Windows IIS Authentication not working with FQDN but is without it

I have an Intranet website, not internet, and whenever I go to http://mysite The website accepts my integrated authentication of the logged in user on the computer/client via IE. if I go to the ...
2
votes
2answers
717 views

What IIS authentication method to use with Git server hosted on IIS?

I have setup a WebGitNet MVC site under IIS on Windows 7 Pro 64-bit (not joined to a domain). WebGit .NET: IIS Hosting for Git "Smart HTTP" using ASP.NET MVC The code has no authentication ...
1
vote
2answers
3k views

IIS Identities: Application Pool vs Connect As in Basic Settings

In the Basic Settings section of a website in IIS 7.5, there is an option to specify a user account via Connect As.... If this is kept off, pass through authentication is used. I assumed that would ...
3
votes
2answers
574 views

Authentication between IIS & SQL Server for Load Balanced App

I'm looking to use this connection string however I'm not sure how to set this up: Provider=SQLNCLI10;Server=myServerAddress;Database=myDataBase; Trusted_Connection=yes; Previously our SQLNCLI10 ...
4
votes
2answers
394 views

Basic HTTP Authentication in IIS

Forgive my lack of IIS experience, but I have a user on a hosted server running IIS with Plesk. He uses protected folders, and I'm looking for a way to: Allow him to protect folders using a simple ...
1
vote
0answers
248 views

Remote access to IIS 5.1 via NTLM

I'm trying to configure remote access to IIS 5.1 web server on a virtual xp machine. The web server is used to expose a ASP.NET web service. I want to access the web service using Java client by ...
0
votes
1answer
135 views

Two factor mechanism to differentiate lan from wan side users

I'm in a situation where a customer of mine would like 2-factor authentication (e.g. log in and receive e-mail with access URL) according to the following rules: If the users is on the LAN, do not ...
3
votes
4answers
5k views

IIS 7.5 basic authentication and Active Directory validation

I'm not an IIS or Active Directory expert by any means so I want to present a scenario here and see if what we want to accomplish is feasible. We have an application hosted on Windows Server 2008 R2 ...
13
votes
2answers
21k views

Troubleshooting Windows Authentication problems (no challenge) in IIS 7.5?

I know that there are thousands of reports of people having trouble getting Integrated Windows Authentication to work with IIS, but they all seem to lead to web pages that don't apply or solutions ...
1
vote
2answers
471 views

Control IIS website access to users with Active Directory

Basic authentication question. I have my website up and it is set up to be used by Windows Active Directory users. How can I control access to the website within AD users so that some have access ...
1
vote
1answer
124 views

How to secure an IIS Site (HTML One) to be available only within a specific domain?

I'm wondering if there is a way to secure an IIS site (Static HTML Pages) to be available only within a specific domain (i.e. user should submit his domain user name and password to browse the site)? ...
0
votes
1answer
59 views

Automatic domain authentication over https

I published an ASP.NET website on the web server of my company using HTTPS but I realised that when I want to access the URL I am prompted for credentials, no matter if I am already logged on the ...
4
votes
2answers
3k views

IIS Basic Authorization ala .htaccess/.htpasswd in apache

How do I implement the protection of the pages (asp.net mvc app), so when I hit the home page or any other pages within the application I get a login dialog popup in the browser I'm looking for ...
2
votes
2answers
2k views

How to configure client certificate authentication in IIS

For me it is trivial to configure Tomcat for client authentication. But trying it to do it in an IIS 7 server (running in Win2008R2 Server) it seems imposible. In tomcat all I have to do is configure ...
2
votes
2answers
308 views

iis' Basic Authentcation with Kerberos?

A friend tells me that he uses Basic authentication of IIS for authentication of his web app. This system uses Kerberos too, but how can Basic Authentication and Kerberos work together?! I know that ...
0
votes
1answer
250 views

IIS 6 (or 7) Losing credentials after hitting DNS

We have a web site using NTLM and allow domain users. Browsing the site from a client pc works fine, with domain credentials being passed in silently and the user authenticated. However, from a ...
2
votes
3answers
6k views

IIS Windows Authentication not working in Internet Explorer via host name; works via IP

I'm trying to get a new Windows Server 2003 box working to host an ASP.NET application that uses Windows Authentication. Here's some info: IIS Anonymous Access is diabled IIS Integrated Windows ...
1
vote
1answer
133 views

How to get an authentication provider status list from IIS (for a Sharepoint site)?

I need to get the authentication provider status of a web application available in IIS through C# or Python code. Example: Is Basic Authentication available for X site?
0
votes
2answers
1k views

ASP.NET Integrated Windows Authentication fails inside network using domain name

I have a problem with an ASP.NET application that was running on IIS 6/Windows 2003, and has recently been deployed to a new server, also running IIS 6 and Windows 2003. It is using Integrated ...
1
vote
1answer
3k views

Risks in raising domain Functional Level from 2003 mixed to 2008 native

We are in the process of replacing all of our Windows 2003 domain controllers with Windows 2008 R2 domain controllers. Once completed, we would like to then raise the domain functional level (of our ...
6
votes
2answers
1k views

IIS Digest repeatedly asking for authentication

I have a development copy of an ASP.NET intranet site checked out and running on my local machine. We're using digest authentication to allow users to log in using their active directory accounts. ...
0
votes
1answer
510 views

IIS 7: Disable authentication for certain client IPs

I have a virtual directory that's protected with basic authentication. I'd like to disable authentication for certain IPs, so that all requests from e.g. 127.0.0.1 are allowed without asking for ...
0
votes
1answer
469 views

IIS Digest Authentication against multiple domains

How do I authenticate across multiple (AD) domains on IIS 6 using digest authentication? Is the domain that the server resides on the only authenticate-able domain?
1
vote
1answer
271 views

Certificate Authentication Proxy with IIS

I have Server-A (IIS-6) performing certificate based authentication of users. If I want to put a reverse proxy (Server-B) in front of Server-A, what is the best method while still continuing to use ...
1
vote
2answers
1k views

Kerberos authentication in IIS with .NET app under domain identity not working

Having a hell of a time trying to get a .NET web app to use Kerberos auth successfully, and would appreciate some assistance from the SF community. Currently there is a Win2003/IIS6 server hosting a ...
1
vote
2answers
190 views

IIS, DNS, Authentication

Not really sure what's going on so I'm going to just list my setup then my symptoms. We are running IIS 6.0 on Server 2003 on 2 identical servers. We run multiple websites on each server (Same ...
0
votes
1answer
375 views

IIS 6 - cant authenticate from localhost but can from other locations

I have a windows 2003 server on an AD domain that hosts an IIS 6 website (currently using http, no SSL). When set to basic auth I can log in as an AD user from both the local system (IE8) and remote ...
0
votes
1answer
131 views

IIS / Virtual Directory authentication

I have an IIS(v6)/Windows 2003/.Net 3.5(app code, libraries etc.) server hosting a website at www.mywebsite.com mapped to E:\Inetpub\wwwroot\mywebsite, we also have a virtual directory (VirtDir) ...
0
votes
1answer
373 views

Allow website access from specific subnet, otherwise ask for credentials

How can I configure IIS 6 to allow access to a sub folder from our intranet without any authentication (well, the IP address needs to be checked but that's already working) from the internet only ...
0
votes
2answers
1k views

IIS: redirect to a webpage if authentication fails

We have an IIS site (MOSS 2007) that uses Windows Authentication. When a user that has forgotten their password tries to login the servers keeps sending 401 requests. This means on IE the user gets ...
1
vote
3answers
100 views

Old network login passed to IIS

Let me start by saying that I am not a server guy - I am a developer. But I develop and manage an ASP.NET application that uses Windows authentication. I've run into the problem I am about to describe ...