Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > june 2007 > threads for june 1 - 7, 2007

Filter by week: 1 2 3 4 5

SSO
Posted by Arnold at 6/7/2007 5:45:42 PM
Hi all, I need to grab the domain user credential to pass it to Apache without prompt. All works if I use the host name (IWA and some code), IIS still prompt for credential if I use the FQDN. I need to use FQDN because we manage a huge WAN made of 1 parent domain and 120 child domain and we...more >>


Can't get advanced digest authentication working
Posted by David at 6/7/2007 4:26:19 PM
Any pointers on what I've missed would be great: Windows 2003 IIS, domain functional level is windows 2003 (forest still at 2000). Have set UseDigestSSP at the w3svc level to 1 via adsutil.vbs w3svc/useDigestSSP1 and checked with Metabase Explorer tool that correctly set. Set the website to...more >>

How to prevent user from access administrators password via attacks on my ftp server
Posted by Rob Dob at 6/7/2007 1:55:23 PM
Hi, I have a problem, I have some users trying to crack my administrator password by attempting dictionary attacks on my ftp server, I am seeing 100's of failed login attempts within my ftp logs, all of them using the user: administrator and a failed password. Unfortunately I have several ...more >>

Kerberos authentication
Posted by Ronald Ruijs at 6/6/2007 6:01:34 PM
Hi, For Kerberos authentication to work on Windows Server 2003/IIS 6 with IE 6 client, does the w3svc service need to run under a domain account, or is Localsystem OK, too? My IIS does NTLM only, and I can't figure out why... Thanks, Ronald ...more >>

Delegation / IIS6 / share located on another computer
Posted by J Talbot at 6/6/2007 3:28:42 PM
Hi I have read a lot of articles on how to configure delegation correctly to enable me to use IWA to gain access to an IIS site which is based on a shared folder located on another computer in the domain but it doesn't let me in and was wondering if someone knew why. This is a pure 2003 dom...more >>

only local admin group works w/ windows authentication
Posted by Phil at 6/5/2007 11:59:01 AM
Im trying to lock down a directory on my web server with windows authentication. Permissions on the actual folders are fine. However when Im prompted for username/pwd only accounts in the local admin group of the server work. I really do not want to add any more accounts to the local ad...more >>

BBBBBBBB
Posted by Lyra at 6/5/2007 12:49:00 AM
Is BBBBBBBB some kind of a code in Internet programming? I have an intranet site which shows this in the header, but the actual code does not include it. Sometimes it's there, sometimes not.. is this some kind of spoofing or what? please help.. I also found this one posting from Yahoo.. th...more >>

Changing user for App Pool in IIS6
Posted by nospam at 6/3/2007 12:00:00 AM
I am trying to change the user credentials for an App Pool. I have created a new user and added the account to the IIS_WPG group. For the site in question I have set the ACLs so the new user has full control over the folders/files used by the site. Then I changed the login credentials in the App ...more >>



IIS 6 strange file
Posted by magagnon NO[at]SPAM maginformatique.com at 6/1/2007 5:48:33 AM
Hi, There is some strange file that are on the root of different website. Some of my friend told me that it is a IIS6 security hole. Does anybody have a solution ??? It's just html file. Like those : default.html tromnk.htm The content of those file was : Ir4Dex Back By Zakix yo...more >>


DevelopmentNow Blog