Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > march 2008 >

iis security : Digest does not work when integraded is turned on. ONLY on non-AD machines.


Chris Auer
3/20/2008 9:01:16 AM
When I turn on digest and Integraded then log in on a machine that is
in my domain (not using domain name) it works fine. This works in FF
and IE 6 & 7. But when I do the same thing from a machine that is not
in my domain in a remote location Digest fails. I have to include my
domain name for it to work (Integaded). When I turn Intregarded off
everything works fine outside my domain. But now my domain users now
have to login because the authorization being passes from IE fails
Digest.

If I could make Integraded and Digest work outside like it does inside
that would be fantastic!!

Chris Auer
3/21/2008 6:51:34 AM
On Mar 20, 11:39=A0pm, "Ken Schaefer" <kenREM...@THISadOpenStatic.com>
[quoted text, click to view]

This is a MOSS site. So to get around it I just extended the site.
Ken Schaefer
3/21/2008 2:39:55 PM
Hi,

Why do you think that Digest authentication is being used? If you enable
both Integrated Windows Authentication and Digest Authentication, then IIS
will present a list of supposed WWW-Authenticate options to the client. The
client will pick the first one on the list that it supports. For both IE and
FF this will be NTLM (or Kerberos in certain Intranet scenarios). Digest
will not be used unless the browser is configured not to use NTLM.

Cheers
Ken

[quoted text, click to view]
AddThis Social Bookmark Button