Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Basic Auth login with Authorization sometimes needs domain\username

$
0
0

Hi,

I've been struggling to find any other posts on this problem.

We use IIS on a server that is a domain member. The base auth is enabled with the default login domain setting "domain.local" .

(naturally it's not really "domain").

We have users in AD Groups, and have assigned the AD Group to the url authorization rules config allowing "domain\Usergroup" or "domain.local\usergroup" under "specified roles or user groups".

The problem is, sometimes a user can't log in unless they use either "domain\username" or "username@domain.local"

Once this problem starts for a user, it's forever. I can create two different users, add them to the group immediately, and maybe one will work with just "username" and the other needs "username@domain.local".

Here is the really wierd thing. For the one that fails, if I change the CASE of one of the letters in the username in the login dialog box (not the actual AD user accout), IT  WORKS!!! "userName" for example.

What the heck is going on? I feel that the IIS server is somehow caching the login usernames, and once it gets stuck, it stays stuck for ever. But I can't find where this cache is or how to clear or reset it.

Help.


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>