Tag Info

Hot answers tagged

1

Upgrade to the latest version of Siteminder, remove all the ISAPI, move from ClassicMode to IntegratedMode as MVC / WEB API needed then use just CASiteMinderWebagentModule and forget about the whole stupidity around hacking MVC/Webapi because ISAPi and siteminder, MVC/Webapi was never designed to run under ClassicMode.


1

You can add host name(mySiteHostName.com) and IP address(101.22.23.01) in the binding. You need to add entry in your client hosts file. C:\Windows\System32\drivers\etc\hosts file 101.22.23.01 mySiteHostName.com. Now you can test in client machine without creating dns record.


1

Java's response is partially correct, I wanted to add this as a comment but need to work on the rep. Anyway, if your wildcard certificate would cover both your sites then just add the HTTPS binding without specifying an IP, that way the wildcard would secure any incoming connection, regardless whether this is sub.domain.com or domain.com/site2. So within ...


1

Because we use NTLM, multiple round trips are made with 401 packets. Our firewall saw that as a brute force attack and blocked it. In the end we fixed it by configuring the firewall and allowing several 401 packets before the firewall sees it as a vulnerability. The way our system is set up we can't use Kerberos. Which sends only one 401 package and would ...


1

No. Since your URL is changing, your browser stops sending the Authorization: header even though the realm could be the same over HTTP and HTTPS. Since basic authentication sends clear text credentials best practice is to redirect all user accesing an URL space that is "secured" with basic authentication to HTTPS.


1

The context of the answer is that IIS 7 doesn't actually care about the certificate binding. IIS 7 only ties to a specific socket (IP + port). Source: IIS7 add certificate to site from command line So, what we want to do is do certificate re-binding on the OS layer. The OS layer takes control of the SSL part, so you use netsh to associate a certificate with ...



Only top voted, non community-wiki answers of a minimum length are eligible