Groups | Blog | Home
all groups > iis security > february 2007 >

iis security : IE7, IIS and digest authentication


sri
2/14/2007 2:25:13 AM
I have a web server with Win 2003 Server and IIS 6 installed with the
HttpAuthentication update KB 904942. I installed IE7 on the windows 2003
server.
The website uses digest authentication.
I used the IE7 installed on windows 2003 and it was able to authenticate the
user successfully on the website with digest. The browser sent the right
authentication headers

I then installed IE7 on a windows xp system and used to fiddler to spoof the
headers. The authentication always fails because the IE7 on windows XP never
sends any authentication headers? I cannot get a XP client with IE7 to digest
authenticate it self on windows 2003 3 IIS 6 webserver. Can some one tell me
how to sort this out?

David Wang
2/14/2007 4:19:44 AM
Are you saying that IE7 on XP Pro with KB 904942 does not complete
Digest Auth with IIS6?

Take Fiddler out of the picture.

FYI: I have IE7 on XP Pro with KB 904942 which does Digest Auth
against IIS6 just fine.



//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//



[quoted text, click to view]

Ken Schaefer
2/15/2007 12:10:09 AM
Hi,

Are you saying that IIS sends back a 401 with the necessary WWW-Authenticate
headers, but IE never sends back any credentials (even after you provide
them)?

What happens if you take Fiddler out of the loop?

Cheers
Ken


[quoted text, click to view]
AddThis Social Bookmark Button