Authentication path. You might as well not enable Integrated Windows
accomplish. There are no hard/fast rules for security, only relative
On Apr 17, 11:33=A0am, "bob" <b...@dd.ff> wrote:
> "When you get prompted for the username/password, if you enter the
> correct credential, does it succeed or fail."
>
> Yes
>
> "Is HTTP KeepAlive enabled."
>
> Yes
>
> I can solve the problem by settings both Anonymous and Integrated Windows
> Authentication, but is this good practice?
>
> On Apr 16, 11:48 am, "bob" <b...@dd.ff> wrote:
>
>
>
> > Thanks for replying.
> > I doublechecked everything and these are the settings for application
> > "myapp":
> > I'm logged as "admin" (member of administrators).
> > In the security of directory c:\inetpub\wwwroot\myapp ,
> > "admin" has full rights and is owner of the directory.
>
> > In IIS, "myapp" is a virtual directory and the Map Security option is se=
t
> > to
> > Integrated Windows
> > Authentication. Futher seems everything else ok ...
>
> > I must add this: i reinstalled windows xp without reformatting the disc
> > but
> > created a new administrator account ("admin"). In directory "myapp", i c=
an
> > see in the security an unknown account (S-1-5-21 -....). Has this
> > something
> > to do with my problem?
>
> > I don't know where to seek ...
> > Thanks
>
> > "David Wang" <w3.4...@gmail.com> schreef in
> > berichtnews:0bb71308-3eb9-4240-88fb-299ac162596b@k10g2000prm.googlegroup=
s.com...
> > On Apr 14, 1:59 pm, "bob" <b...@gh.vb> wrote:
>
> > > Hi,
>
> > > my configuration: windows xp prof sp2 with IIS 5.1.
>
> > > I have several asp.net applications some using login/password (with
> > > Anonymous authentification set in IIS) and others using the windows
> > > account
> > > (with Integrated Windows Authentification).
>
> > > When testing the application on the IIS server with administrator
> > > account,
> > > for all applications using windows account i have to introduce an
> > > account/pw
> > > in a little window. Even when clicking the option "remember the
> > > password",
> > > the next time i get that windows. This does not happen for the
> > > application
> > > using Anonymous auth.
>
> > > If i push the cancel button of that windows, i get the error:
> > > HTTP 401.2 - No permissions: login failed because of server
> > > configuration
>
> > > Any way to get rid of that authentification window?
> > > Thanks
> > > Bob
>
> > If the authentication window shows up with Integrated Windows
> > Authentication, it usually means something is wrong within your
> > configuration -- usually either Active Directory, networking, or Group
> > Policy issue.
>
> > ASP.Net login/password (aka "Forms Auth") uses Cookies to remember the
> > login, which has its own issues, but you haven't spotted them yet.
>
> > Bottom line, you get rid of that authentication window when your
> > machine is properly configured. By default, Integrated Windows
> > Authentication would work, so you've got something else going on that
> > is breaking things.
>
> > //David
http://w3-4u.blogspot.comhttp://blogs.msdn.com/David.Wang
> > //- Hide quoted text -
>
> > - Show quoted text -- Hide quoted text -
>
> - Show quoted text -