Groups | Blog | Home
all groups > iis security > july 2007 >

iis security : Allow jar files to be served without authentification?


Crystal
7/24/2007 7:20:02 AM
We have IIS configured to require SSL and allow anonymous access is disabled.
I need to be able to allow .jar files to be served up without
authentification. With anonymous access enabled, our .jar files are served
up. With it disabled, we are continually prompted for a User Name and
Password. How could we resolve this problem?

Thanks!

David Wang
7/27/2007 10:34:45 AM
[quoted text, click to view]


Configure .jar files to only have Anonymous authentication. You will
have to do this one file at a time because IIS Authentication settings
are on a per-URL scope, not RegExp-extension-based scope.

This means you can make your life easier by creating a vdir holding
all .jar files and configuring the vdir to allow anonymous
authentication. Instead of sprinkling .jar files everywhere and then
trying to tell IIS "only anonymous authentication for .jar files".

It would be possible to rewrite IIS to authenticate with a scope like
that, but that's not what currently exists.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//
AddThis Social Bookmark Button