all groups > iis security > may 2004 >
You're in the

iis security

group:

Redirecting from http to http pops up a login box


Redirecting from http to http pops up a login box tonyz.wrightz NO[at]SPAM consultant.com
5/26/2004 8:15:59 PM
iis security: Hi,

I am trying to secure a credit card page. I redirect to the credit
card page from the url:
http://mipdev05/features/myshops/MsShopCheckout.aspx?ID=a4f12d4d-e2fd-4785-83ec-4ea2ed1ca48c&P=1&VT=G
to the url:
https://mipdev05/features/myshops/MsPaymentDetails.aspx?ID=a4f12d4d-e2fd-4785-83ec-4ea2ed1ca48c&P=1&VT=G

It pops up a logon dialog box for the https, Site:mipdev05
Realm:mipdev05.

The redirect occurs in asp.net (c#). It is simply a
Response.Redirect. I am already logged into the http: site and wish
to use the same credentials to log into the https site without it
popping up the login box.

I have used Server.Transfer, but I am unconvinced that it is using
https.

Any ideas?

Thanks,
Re: Redirecting from http to http pops up a login box Jerry Pisk
5/26/2004 11:39:47 PM
It won't happen, as far as the browser cares you're accessing a different
resource, even though it's the same server it's going over a different
protocol so you have to login again. Once you login to the site over both
protocols you can switch back and forth.

Jerry

[quoted text, click to view]

Re: Redirecting from http to http pops up a login box tonyz.wrightz NO[at]SPAM consultant.com
5/27/2004 4:09:36 PM
So how do all the other sites do it? Do they write code to log from
http to https or something? It seems a bit ridiculous to require
someone to log in to the same site twice...

[quoted text, click to view]
AddThis Social Bookmark Button