Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Basic Authentication does not prompt for user credentials - IIS 8.5 shared config

$
0
0

Hello

I am an IIS veteran and have been using this technique for many years to require a user to enter credentials before gaining access to content.

For some reason however, on this particular IIS 8.5 installation, using a shared configuration, the browser refuses to show a login dialog and IIS simply returns the default message/page:

401 - Unauthorized: Access is denied due to invalid credentials.
You do not have permission to view this directory or page using the credentials that you supplied.

It is difficult to restart IIS on this server as it is in production.  I have restarted a few times since making the changes to no avail.

The Site root has "anonymous" and "basic authentication" enabled.  The sub-folder I am trying to secure has "anonymous" disabled and "basic authentication" enabled.  I believe this is not required - each site/folder is evaluated itself.  The settings of the parent are not taken into consideration, right?

Why do all browsers (I am aware of a FF on Mac bug) fail to present a login dialog?

Thanks and regards

Alan


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>