http authentication problem

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hi, i've followed some threads in this newsgroup on getting user logon by using asp / asp.net, i've set IIS to not enable anonymous user access. However, whenever i'm trying to access the site, a user login form will pop up eventhough i'm already logged in to the domain. Is there a way i can disable the login to access the site? thanx
 
I assume that you are using Internet Explorer. IE will only "auto-logon" to
a machine if:
a) the machine is in the Intranet zone
-or-
b) the machine is in the Trusted Sites zone
-and-
c) you haven't changed the IE settings to disable autologon.

Check this KB article for the conditions when IE thinks is the Intranet
zone:

Internet Explorer May Prompt You for a Password
http://support.microsoft.com/?id=258063

-and-

Intranet Site Is Identified as an Internet Site When You Use an FQDN or IP
Address
http://support.microsoft.com/?id=303650

Otherwise, automatic sending of credentials is, potentially, a huge security
risk, as any site out there on the internet would be able to get your
username/password combination.

Cheers
Ken



: hi, i've followed some threads in this newsgroup on getting user logon by
using asp / asp.net, i've set IIS to not enable anonymous user access.
However, whenever i'm trying to access the site, a user login form will pop
up eventhough i'm already logged in to the domain. Is there a way i can
disable the login to access the site? thanx
 
In the system.web section of Web.config, make sure you have
<identity impersonate="true"/>

Michael Earls

hi, i've followed some threads in this newsgroup on getting user logon by
using asp / asp.net, i've set IIS to not enable anonymous user access.
However, whenever i'm trying to access the site, a user login form will pop
up eventhough i'm already logged in to the domain. Is there a way i can
disable the login to access the site? thanx
 
Back
Top