all groups > iis security > april 2007 >
You're in the

iis security

group:

Digest Authentication - IIS6


Digest Authentication - IIS6 Pablo A. Allois
4/19/2007 6:06:35 PM
iis security:
Hi everybody,

First, I apology for my english.

I am fighting with a web site to setting up to use Digest
Authentication.
I set the domain correctly, DNS are ok, but I cant login to the
website.
If I setup the website with Basic authentication works fine (for the
server and for the sniffers).
I verify that the user password have a reversible encryption.

What does digest need to work ?

It happen on a Windows 2003 Server R2, IIS6, Application Pool was
running with System and with DomainGodCredentials ... and still not working.


Saludos y gracias!

Re: Digest Authentication - IIS6 DaveMo
4/20/2007 8:27:25 AM
On Apr 19, 2:06 pm, "Pablo A. Allois" <pablo-lis...@allois.com.ar>
[quoted text, click to view]

Hola Pablo,

Your english is better then most people who were born in the US :)

Digest AuthN for domain accounts since Windows 2003 does not require
any settings or privilege levels different then what you would need to
configure in order to do regular Windows Integrated Authentication.

Digest can be a difficult protocol to work with, however, because the
user name is part of the hash value. Using an unexpected name form,
random capitalization, or a mismatch between the client and server can
all cause problems.

Are you using a domain account?
What version is the server running AD?
What is the client OS and what version?
What name form are you using for the user account? NetBIOS (domain
\user) and UPN forms should work for sure.

HTH,
Dave
Re: Digest Authentication - IIS6 Pablo A. Allois
4/20/2007 1:33:49 PM
Thanks David for the english :D

So, the Digest is case sensitive ? this would be a problem ... I will have
thousands of users out of the organization validating validating ... this
could be a thousands of problems.


[quoted text, click to view]
Yes, for that reason I want to use digest

[quoted text, click to view]
Windows 2003 Ent R2

[quoted text, click to view]
Could be any one.
The web server is Windows 2003 STD R2

[quoted text, click to view]
UPN
I need that the customer input UserPrincipalNamePrefix ... without the
UserPrincpalNameSuffix ... for that reason I choosse between Digest or
Basic.
And for security I prefer Digest.


Saludos!


[quoted text, click to view]

Re: Digest Authentication - IIS6 Ken Schaefer
4/23/2007 12:00:00 AM

[quoted text, click to view]

This is not entirely true. It depends on the functional level that your
Active Directory domain is running as.

Cheers
Ken




[quoted text, click to view]
Re: Digest Authentication - IIS6 Pablo A. Allois
4/23/2007 8:10:37 AM
Windows 2000 functional leve.
What consecuences brings that ?

[quoted text, click to view]

AddThis Social Bookmark Button