Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

IIS Integrated authentication

$
0
0

Sorry I'm not a developer and have little experience with IIS.

Short question, is there a way in IIS to see what credentials are being passed via integrated authentication, even just the user ID?

I have an IIS web app running on windows 2016.  Windows integrated authentication works fine for IE and Chrome so I know it works properly.

There is some client software that authenticates to the windows domain via IIS windows integrated authentication.  This application lets me log in by "using windows credentials".   If I connect to the app using the FQDN of the server all is fine, if I use any other FQDN it works also...EXCEPT when I use specicically one domain.

Let me explain this way.

The server name is MyServer001.MyBank.local

If I connect to that address it authenticates.

If I add DNS entires for hte following I can also authenticate

MyServer001.MyBank1231.com

ThisSucks.MyBank123123.com

ThisSucks.anything.123123com

Whatever.whatever.whatever.com

BUT

If I use the name MyBank.us.MyOtherPublicDomain.com it fails to log in.  I can address anything at MyOtherPublicDomain.com

Thanks


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>