Taggs Posted November 26, 2007 Share Posted November 26, 2007 I am trying to get IIS authentication through our domain but I can't seem to get it to work.I have a w2k domain. My web site is run on a w2k3 server which is a member of the domain.I have set integrated windows and Digest Authentication on. Unchecked Enable anonymous access.When trying to access the site I get my login box but it does not accept the credentials. I am an enterprise admin.The Title of the box says 'Connect to <websiteheader.domainname>'I get three tries and then I get - You are not authorized to view this pageIf I try to connect to the site through our VPN connection it works.Any Idea's? Link to comment Share on other sites More sharing options...
Stoic Joker Posted November 26, 2007 Share Posted November 26, 2007 As I recall Windows Integrated & Digest Auth are not compatable...You have to pick one or the other. Link to comment Share on other sites More sharing options...
Taggs Posted November 27, 2007 Author Share Posted November 27, 2007 (edited) Hi Stoic Joker, I have read here here on the MS site that IIS will pick the strongest authentication and then works its way down the list until it gets to a protocol that both sides support. So it should work with both selected.Saying that, I have tried with just one or the other and it still did not work. RegardsTaggs Edited December 3, 2007 by Taggs Link to comment Share on other sites More sharing options...
Stoic Joker Posted November 27, 2007 Share Posted November 27, 2007 Hm...How are you entering the username? Just username? or DomainName\UserName? or UserName@DomainName Link to comment Share on other sites More sharing options...
cluberti Posted November 27, 2007 Share Posted November 27, 2007 I would love to see a network trace of the connect attempt from the client captured by wireshark or netmon - do we even know what authentication is being requested when the 401 is sent from the server to the client? Link to comment Share on other sites More sharing options...
Taggs Posted December 3, 2007 Author Share Posted December 3, 2007 @Stoic JokerI have tried all combinations of user name I can think ofUsernameDomainName\UserNameUserName@DomainNamelocalmachine\adminmachinename.domain\username@clubertiI will try and get some network traces Link to comment Share on other sites More sharing options...
Taggs Posted December 3, 2007 Author Share Posted December 3, 2007 I have just tested this again and it seems to be working now.Hmmmmmmmmmmmm Not sure if I want to enable this on my live app until I can find out why. I think I will create some new sites and see if I can re-create.Thanks for the help guys TaggsP.S. I will post back if I find anything useful Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now