auth_user is lying ?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

z f - 30 Oct 2005 14:36 GMT

trying to achieve windows authentication on the fly (without the file
configured to deny anonymous access in IIS)
i returned a 401 status if the
Request.ServerVariables("auth_user") = ""

this is OK, the 401 status Code returned with additional headers and the
browser performed windows authentication
and the next time i had auth_user correctly.
but after closing the browser and re-opening it and requesting the same page
again, i get the auth_user filled with the old value without the
authentication being done again!
how can this be?
( i use fiddler to see http comunication between client and server)
TIA.

Reply to this Message

Bent Kristiansen - 30 Oct 2005 16:30 GMT

What is you environment like when you har getting this problems. Do you have
a server you are deploying to?

If you are on your local machine IE will send the auth_user variable to the
IIS because og the web context is "safe". If you are accessing you
application form another computer you might have to add the name of your
server in the Intranet Zone settings on you IE to allow it to send auth_user
to the server.

I hope I understood your problem correct?

Signature

Bent Kristiansen
bent.kristiansen(AT)bekk.no

> trying to achieve windows authentication on the fly (without the file
> configured to deny anonymous access in IIS)
[quoted text clipped - 10 lines]
> ( i use fiddler to see http comunication between client and server)
> TIA.

Reply to this Message

z f - 30 Oct 2005 16:57 GMT

it's because fiddler re-use sockets if i restart fiddler it's OK.

> What is you environment like when you har getting this problems. Do you
> have
[quoted text clipped - 25 lines]
>> ( i use fiddler to see http comunication between client and server)
>> TIA.

Reply to this Message

auth_user is lying ?

Free Magazines