[THIN] Re: IIS Web Interface Issue

  • From: "Andrew Wood" <andrew.wood@xxxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Wed, 26 May 2010 16:23:25 +0100

In IE8: Internet options-> security->Custom Level and then all the way down
at the bottom is 'user authentication' which should be 'automatic logon only
in intranet zone' - if you wanted to,  you can change the settings there. 

But, you don't need this to happen - you just wanted to know "Cant see why
IP would fail." - it fails for reasons outlined below... hope this helps.


-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Kevin Stewart
Sent: 25 May 2010 22:53
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: IIS Web Interface Issue

Sounds like your clients are internal, since you're using Windows
Integrated auth. Internal clients in the same domain as the WIA IIS
box will try to use Kerberos if conditions are right, like using a
host name that matches the object's service principal name. You can't
assign an SPN to an IP address, so Kerberos fails and there's a good
chance you'll get prompted for credentials.

HTH

Kevin Stewart

On 5/25/10, Angela Smith <angela_smith9@xxxxxxxxxxx> wrote:
>
> Hi Andrew
>
> I could not find this setting.  What is it listed as??
>
> Thanks
> Angela
>
> From: andrew.wood@xxxxxxxxxxxxxxxx
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: IIS Web Interface Issue
> Date: Tue, 25 May 2010 09:09:06 +0100
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> You'll not be able to use integrated authentication with a
> dotted IP address - that'll change the zone type from "local"
> to "internet" by  default.
>
>
>
> You can change this mind by modifying the internet zone's
> security settings.
>
>
>
>
>
>
>
> From: thin-bounce@xxxxxxxxxxxxx
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Angela Smith
>
> Sent: 25 May 2010 08:30
>
> To: thin@xxxxxxxxxxxxx
>
> Subject: [THIN] IIS Web Interface Issue
>
>
>
>
>
>
>
> Hi
>
>
>
> I have a strange issue with my Windows 2003 Web Interface Servers.  From a
> Windows XP client I can connect to the WI site using the server name but I
> cannot connect using the IP address.  When the IP is used a popup asking
> for user authentication occurs.  IIS site is setup with both Anonymous and
> Integrated Windows authentication..
>
>
>
> We will deploy using the name but I would be more confident knowing the IP
> works also..  Cant see why IP would fail.
>
>
>
> Any help appreciated
>
>
>
> Ang
>
>
>
>
>
>
>
> Australia's
> #1 job site If It Exists, You'll Find it on SEEK
>
>                                       
> _________________________________________________________________
> Browse profiles for FREE! Meet local singles online.
> http://clk.atdmt.com/NMN/go/150855801/direct/01/


-- 
Kevin G. Stewart
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

************************************************
For Archives, RSS, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************

Other related posts: