[WEB4LIB] password protection and IIS 4.0

[Darryl Friesen]

My original message didn't seem to go through (did it??) so I'm resending it.
My appologies if you get this twice.

- Darryl

----- Original Message -----
From: Darryl Friesen <Darryl.Friesen at usask.ca>
To: <walterg at yorku.ca>; Multiple recipients of list <    >
Sent: February 8, 1999 1:20 PM
Subject: Re: [WEB4LIB] password protection and IIS 4.0


>
>>Can we restrict access to a directory using passwords on a server
>>running IIS 4.0 and have it work for all clients?
>
>>For a variety of reasons, we are moving most of our web content
>>(excluding the catalogue itself) from a Unix server (running NCSA
>>1.5 on AIX) to an NT server running Microsoft-IIS 4.0. We have
>>been restricting access to one directory tree with a password on
>>the Unix server, but have been unable to get this to work in the
>>same way on the NT server. Our systems person has only been able
>>to get it to work for MSIE users; Netscape users are locked out
>>completely. Does this make sense? Or has our systems person
>>missed something fundamental?
>
>It sounds like the NT server is doing authentication using NT's method of
>Challenge/Response (uses the NT usernames and passwords, authenticated
against
>a domain controller), instead of 'BASIC' (probably what the Unix server
used).
>This works great for IE because it understands Challenge/Response and will
>respond correctly.  Netscape does not.
>
>Try this with Netscape:  in the username field, instead of putting in your
>username, enter:
>
>    NTDOMAIN/username
>
>ie.  Our Windows NT Domain name (this shows up in the Logon dialog box when
>you connect to the network) is "LIBRARY" so I'd use "LIBRARY/friesen" as my
>username.  Enter the password normally.
>
>Should work.  Cool huh.
>
>As for whether or not there's a way around this I don't know.  I didn't play
>with IIS enough to find one.  There _should_ be a way to use BASIC
>authentication instead of Challenge/Response, but I don't know how that's
done
>either.
>
>So, no, I wouldn't say he's missed anything fundamental.
>
>I'd be interested to know if you do find a solution.
>
>
>- Darryl
>
>  ----------------------------------------------------------------------
>   Darryl Friesen, B.Sc., Programmer/Analyst    Darryl.Friesen at usask.ca
>   Consulting & Development                     http://gollum.usask.ca/
>   Department of Computing Services                 163 Murray Building
>   University of Saskatchewan                              Main Library
>  ----------------------------------------------------------------------
>  "The Truth Is Out There"
>