Groups | Blog | Home
all groups > iis security > june 2007 >

iis security : IIS username:password@server.domain.com



murphyadam NO[at]SPAM sbcglobal.net
6/8/2007 7:52:56 PM
How can I set up IIS to accept authentication from a client POSTing to
my website with their username/password in the URL?

Right now I have Annonymous turned off and Digest turned on. The user
account has read/execute privileges for the virtual folder.

So they are sending me this

http://username:password@server.domain.com/url/url.page.aspx

And they are getting this

Error 401.1 Unauthorized

I want them to get this

202 Success
DaveMo
6/9/2007 8:26:56 AM
[quoted text, click to view]

You should read this: http://support.microsoft.com/kb/834489

You need to enable Basic authentication to make this work.

Also, this sends credentials in plain text over the network, so if you
really want to use Basic (often not the best choice) then you should
use SSL (HTTPS).

HTH,
Dave
murphyadam NO[at]SPAM sbcglobal.net
6/12/2007 8:46:24 PM
I turned on basic authentication but I still get error 401 when trying
to POST.
AddThis Social Bookmark Button