all groups > asp.net security > september 2005 >
You're in the

asp.net security

group:

Windows Authentication and Domain Suffixes



Windows Authentication and Domain Suffixes ericmatz
9/29/2005 7:46:13 AM
asp.net security: I've been baffled by this for awhile now. I have a simple site set up to use
Windows Authentication, with an allow="*" and deny="?" to allow only domain
users. The web server is Win2003 and is not exposed to the internet. If I
access the site with the URL http://myserver/mysite/, I can access it without
a challenge/response dialog and it picks up my credentials. However, if I
access the site with the URL http://myserver.mycompany.com/mysite/, I get a
challenge/response dialog and have to enter my domain credentials. I suspect
this issue is related to the domain or DNS or perhaps IIS, but I doubt there
is any ASP.NET configuration issue. Anyone ever experience this problem?

Re: Windows Authentication and Domain Suffixes Brock Allen
9/29/2005 8:05:21 AM
Keith discusses this here:

http://msdn.microsoft.com/msdnmag/issues/05/09/SecurityBriefs/

-Brock
DevelopMentor
http://staff.develop.com/ballen

[quoted text, click to view]

Re: Windows Authentication and Domain Suffixes ericmatz
9/29/2005 8:28:06 AM
Thanks, Brock! That is EXACTLY what I needed. It even gave me the
justification I need to go to my domain admins and request that this be added
to our local security policy.

[quoted text, click to view]
AddThis Social Bookmark Button