Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008


all groups > iis security > november 2004 > threads for november 22 - 28, 2004

Filter by week: 1 2 3 4 5

Integrated Windows Authentication and Windows XP
Posted by D at 11/28/2004 7:12:39 PM
We are running an IIS 5 server on a Windows 2000 Server using Integrated Windows Authentication to connect to our ASP.NET application. All are able to connect properly except those users running IE on a Windows XP platform (both with and without SP2). We traced the problem to the use of ...more >>

certificates
Posted by Jordan at 11/28/2004 2:49:44 PM
Hello, Question, what is the TRUE purpose of having a certificate for a website? just to prove the authenticity? saying this is the REAL site? Regards, Jordan ...more >>

IIS Authentication Providers
Posted by Timothy J. Bruce at 11/28/2004 7:52:26 AM
Greetings: You can call me crazy if you like, but I would like to create an additional authentication provider for IIS. I would like IIS to throw a 300 response (this bringing up the ever famous `porn challenge') and resolve the plain-text supplied credentials using my library instead of the ...more >>

asp request data lost with iis 6.0
Posted by markus.unterauer NO[at]SPAM maintec.at at 11/25/2004 12:24:55 PM
Hello, I have an asp application with a logon form that posts form content (username and pw textbox) to itself in order to process and verify. If the application is set to windows integrated authentication in iis 6.0, form data is posted well and can be accessed in the target asp page via req...more >>

SmartNav.js permission denied after Windows update
Posted by Mike Masterton at 11/24/2004 7:29:01 PM
I ran the latest Windows update for Windows Server 2003 on 11/24/2004. After the security hotfixes in that update were applied, I started getting the following error when I try to run a local ASP.NET Web Application in the Visual Studio .NET 2003 debugger: http://localhost/aspnet_client/sy...more >>

prevent asp.net and IUSR from accessing c:\
Posted by Mike Schwarz at 11/24/2004 2:17:45 PM
hi i have installed a small script on a virtual web called explore.aspx this is able to explore my whole c:\ directory, as the user asp.net is a member of the group "Domain User / User" and this user does has read permission on the whole drive c:\ how can i prevent this? is it necessary th...more >>

IIS Security
Posted by James Robetson at 11/24/2004 1:50:33 PM
I have just installed the Front Page 2002 Server extensions onto my Windows 2000 server platform. I was wanting to fix one problem but created many others. It has removed the security of all of the individual users from their directories and when I add them back into the NTFS file system the...more >>

Multiple Sites running same code, w/SSL.
Posted by iiisystems NO[at]SPAM yahoo.com at 11/24/2004 11:54:49 AM
I have an IIS 5.0 server hosting multiple sites that point to the same code base. The host is the only part of the FQDN that changes per customer. The domain for all the sites will always be samedomain.com. All the sites resolve to the same IP so I use Host Header Name in IIS to direct traffic. ...more >>



Acquiring Certificates
Posted by rjolivie at 11/23/2004 11:43:02 PM
I have gone through the request for certificate wizard in IIS. It's not really clear about who to send the request to. I went to Verisign's website and purchasing a certificate is EXPENSIVE!!! Is there anyway to do this free or cheap? How can I get a free/cheap certificate??? Thanks ...more >>

Integrated Windows Authentication problem in AD 2000
Posted by kyyap NO[at]SPAM streamyx.com at 11/23/2004 7:55:36 PM
Hi all, Currently I have change one of our intranet website to Integrated windows authentication mode in IIS5.0 ,the website is use to let the system administrator to create user account/group in Active Directory. The are several problem happen after this change ,the account creation with h...more >>

IIS 6 will not work with IP address
Posted by Arman at 11/23/2004 3:59:03 PM
I am trying to deploy an asp.net application on IIS 6 and when i try to access any of the pages using the "localhost" then it works, when i try to use the IP address of the computer, then I am getting an ACL error saying that "you are not authorized to view this resource" and the page cannot...more >>

Secure Channel Client Authentication Required
Posted by Spanky at 11/23/2004 11:59:03 AM
Getting the http error of "HTTP/1.1 403 Access Forbidden Server" which tells me that it is not utilizing the security certificate that is installed on IIS. Additionally the error message states Secure Channel Client Authentication Required This virtual directory requires a browser that sup...more >>

IIS 6 slows down ASP pages
Posted by Aleks at 11/22/2004 10:56:02 PM
Hi, I have spent hours doing research on this item and found many people with the same problem and no answers. I have an ASP web application that connects to MS SQL 2000. I was running it on Win2000 just fine, no problems whatsoever. We upgraded to Win2003 and now ASP pages take forever to ...more >>

Secure WebDAV - ending connection
Posted by David P. Lurie at 11/22/2004 2:39:04 PM
I need to access files via SSL-encrypted WebDAV from our server at a remote site from locked-down workstations, basically with IE6 configured with limited functionality and only a few apps. The connection needs to be dropped when the browser is closed. The secure web site address can be fo...more >>

Site using Basic authentication and SSL requiring Admin rights
Posted by Gearhead at 11/22/2004 10:59:05 AM
I've setup a website using Basic Authentication and SSL in IIS 5. The only people that can be authenticated are people with administrative rights, despite the fact that the file security on the wwwroot folder allows Everyone read access. Does anyone know why members of the User group can't a...more >>

Certificates
Posted by paulh at 11/22/2004 10:37:05 AM
How many certificates can I have on a single IIS server?...more >>

Doco on running AppPool under domain account
Posted by Kevin C at 11/22/2004 10:15:57 AM
Can anyone point me to some good doco on running a custom app pool under a domain account? I have searched google and found nothing that is really good. Kevin ...more >>


DevelopmentNow Blog