all groups > iis security > november 2004 > threads for november 22 - 28, 2004
Filter by week: 1 2 3 4 5
Integrated Windows Authentication and Windows XP
Posted by D at 11/28/2004 7:12:39 PM
We are running an IIS 5 server on a Windows 2000 Server
using Integrated Windows Authentication to connect to our
ASP.NET application.
All are able to connect properly except those users
running IE on a Windows XP platform (both with and without
SP2). We traced the problem to the use of
... more >>
certificates
Posted by Jordan at 11/28/2004 2:49:44 PM
Hello,
Question, what is the TRUE purpose of having a
certificate for a website? just to prove the
authenticity? saying this is the REAL site?
Regards,
Jordan
... more >>
IIS Authentication Providers
Posted by Timothy J. Bruce at 11/28/2004 7:52:26 AM
Greetings:
You can call me crazy if you like, but I would like to create an additional
authentication provider for IIS. I would like IIS to throw a 300 response
(this bringing up the ever famous `porn challenge') and resolve the
plain-text supplied credentials using my library instead of the ... more >>
asp request data lost with iis 6.0
Posted by markus.unterauer NO[at]SPAM maintec.at at 11/25/2004 12:24:55 PM
Hello,
I have an asp application with a logon form that posts form content
(username and pw textbox) to itself in order to process and verify. If
the application is set to windows integrated authentication in iis
6.0, form data is posted well and can be accessed in the target asp
page via req... more >>
SmartNav.js permission denied after Windows update
Posted by Mike Masterton at 11/24/2004 7:29:01 PM
I ran the latest Windows update for Windows Server 2003 on 11/24/2004. After
the security hotfixes in that update were applied, I started getting the
following error when I try to run a local ASP.NET Web Application in the
Visual Studio .NET 2003 debugger:
http://localhost/aspnet_client/sy... more >>
prevent asp.net and IUSR from accessing c:\
Posted by Mike Schwarz at 11/24/2004 2:17:45 PM
hi
i have installed a small script on a virtual web called explore.aspx
this is able to explore my whole c:\ directory, as the user asp.net
is a member of the group "Domain User / User" and this user
does has read permission on the whole drive c:\
how can i prevent this?
is it necessary th... more >>
IIS Security
Posted by James Robetson at 11/24/2004 1:50:33 PM
I have just installed the Front Page 2002 Server extensions onto my Windows
2000 server platform. I was wanting to fix one problem but created many
others. It has removed the security of all of the individual users from
their directories and when I add them back into the NTFS file system the... more >>
Multiple Sites running same code, w/SSL.
Posted by iiisystems NO[at]SPAM yahoo.com at 11/24/2004 11:54:49 AM
I have an IIS 5.0 server hosting multiple sites that point to the same
code base. The host is the only part of the FQDN that changes per
customer. The domain for all the sites will always be samedomain.com.
All the sites resolve to the same IP so I use Host Header Name in IIS
to direct traffic. ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Acquiring Certificates
Posted by rjolivie at 11/23/2004 11:43:02 PM
I have gone through the request for certificate wizard in IIS.
It's not really clear about who to send the request to. I went to
Verisign's website and purchasing a certificate is EXPENSIVE!!!
Is there anyway to do this free or cheap? How can I get a free/cheap
certificate???
Thanks
... more >>
Integrated Windows Authentication problem in AD 2000
Posted by kyyap NO[at]SPAM streamyx.com at 11/23/2004 7:55:36 PM
Hi all,
Currently I have change one of our intranet website to Integrated
windows authentication mode in IIS5.0 ,the website is use to let the
system administrator to create user account/group in Active Directory.
The are several problem happen after this change ,the account creation
with h... more >>
IIS 6 will not work with IP address
Posted by Arman at 11/23/2004 3:59:03 PM
I am trying to deploy an asp.net application on IIS 6 and when i try to
access any of the pages using the "localhost"
then it works, when i try to use the IP address of the computer, then I am
getting an ACL error saying that "you are not authorized to view this
resource" and the page cannot... more >>
Secure Channel Client Authentication Required
Posted by Spanky at 11/23/2004 11:59:03 AM
Getting the http error of "HTTP/1.1 403 Access Forbidden Server" which tells
me that it is not utilizing the security certificate that is installed on
IIS. Additionally the error message states
Secure Channel Client Authentication Required
This virtual directory requires a browser that sup... more >>
IIS 6 slows down ASP pages
Posted by Aleks at 11/22/2004 10:56:02 PM
Hi,
I have spent hours doing research on this item and found many people with
the same problem and no answers.
I have an ASP web application that connects to MS SQL 2000. I was running it
on Win2000 just fine, no problems whatsoever. We upgraded to Win2003 and now
ASP pages take forever to ... more >>
Secure WebDAV - ending connection
Posted by David P. Lurie at 11/22/2004 2:39:04 PM
I need to access files via SSL-encrypted WebDAV from our server at a remote
site from locked-down workstations, basically with IE6 configured with
limited functionality and only a few apps.
The connection needs to be dropped when the browser is closed. The secure
web site address can be fo... more >>
Site using Basic authentication and SSL requiring Admin rights
Posted by Gearhead at 11/22/2004 10:59:05 AM
I've setup a website using Basic Authentication and SSL in IIS 5. The only
people that can be authenticated are people with administrative rights,
despite the fact that the file security on the wwwroot folder allows Everyone
read access. Does anyone know why members of the User group can't
a... more >>
Certificates
Posted by paulh at 11/22/2004 10:37:05 AM
How many certificates can I have on a single IIS server?... more >>
Doco on running AppPool under domain account
Posted by Kevin C at 11/22/2004 10:15:57 AM
Can anyone point me to some good doco on running a custom app pool under a
domain account? I have searched google and found nothing that is really
good.
Kevin
... more >>
|