Results 1 to 3 of 3
  1. #1
    2 Star Lounger
    Join Date
    Jan 2001
    Location
    Edinburgh, Midlothian, Scotland
    Posts
    144
    Thanks
    0
    Thanked 0 Times in 0 Posts

    IIS6 on W2K3 Login

    Hi All,

    We have an ASP.NET 2.0 intranet application sitting on a (multihomed, with only one default gateway configured and static routes in the routing table) W2K3 IIS6 box. IWA is the only authentication method enabled in IIS and our web.config handles authentication based on domain group memebership.

    The IE6 clients within our domain have the intranet site FQDN within their "Trusted Sites" zone (pushed via GP) and IWA is enabled on the IE6 clients. Within our offices, the IE6 clients are logging into the site automatically, as we would expect. All is good.

    Naturally, when users attempt to connect to the site from home (or anywhere else outside the organisation), they are prompted to authenticate with a standard NTLM login dialog. However, in IE6 and IE7, the username field in the dialog is pre-populated as "FQDN of siteusername". If the user types in their password, login fails. If they change the username field to "domainusername" and enter their password, they authenticate OK.

    Why is the username field pre-populated with "FQDN of siteusername"? Is it something to do with SPN (which I haven't set for this site/web app yet?)? Can I change this behaviour somehow, so that the username field is pre-populated correctly in "domainusername" format?

    Note that I'm not sure what other browsers prompt with, so I'm interested to know if I can change something so that all browsers pre-populate the username field with the "domainusername" format.

    TIA,

  2. #2
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Indianapolis, Indiana, USA
    Posts
    1,862
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: IIS6 on W2K3 Login

    I've experienced the same problem as a user with certain sites (such as my company's webmail).

    Have you tried setting the default Realm in IIS? I'm not sure if that's the ticket, but I know it's possible to achieve your goal with the right configuration.

  3. #3
    2 Star Lounger
    Join Date
    Jan 2001
    Location
    Edinburgh, Midlothian, Scotland
    Posts
    144
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: IIS6 on W2K3 Login

    Hi,

    I think the "Realm" setting only applies to Basic and Digest Authentication in IIS, not Integrated Windows Authentication - hold on, I'll check. Yes, it does. The "Realm" field only becomes available when either of these two methods of authentication are selected. I'm sure there is a solution to this and I think its setting the SPN, but I want to be sure?

    Thanks for your reply,

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •