Integrated Windows Authentication

I am having a weird problem Integrated Windows Authentication in IIS 6. We
have an employee web site that prompts the employee to put in their username
and password. The only authentication method is Integrated Windows
Authentication. If then are accessing the site from within the office
everything works fine. Access from the outside is where is gets a little
weird. If the employee has a broadband connection, they are prompted for
their username and password, which they enter and can access the site. If
the employee is on a dial-up connection, they get the prompt for their
username and password, but the authentication fails.

What is there different in a dial-up connection versus a broadband
connection that would deny access with the same username and password?


Bryan Weaver

Re: Integrated Windows Authentication

In an Internet scenario, the browser would use NTLM authentication (IE does
not attempt Kerberos authentication when the website is in the "Internet"
security zone).

NTLM authentication fails when the request passes through most proxy
servers.

My suspician is that your broadband user/connection is not passing through a
proxy server to reach your website, whereas the dial-up connection is.

Sometimes, if you look at the HTTP headers returned by the server (e.g.
using WFetch or similar) you can see a HTTP header inserted by the proxy (if
any) that the request is passing through. That might give some indication of
whether a proxy is in-play or not.

Cheers
Ken


"Bryan Weaver" wrote in message
news:Oei6SxzKGHA.1832@TK2MSFTNGP11.phx.gbl...
:I am having a weird problem Integrated Windows Authentication in IIS 6. We
: have an employee web site that prompts the employee to put in their
username
: and password. The only authentication method is Integrated Windows
: Authentication. If then are accessing the site from within the office
: everything works fine. Access from the outside is where is gets a little
: weird. If the employee has a broadband connection, they are prompted for
: their username and password, which they enter and can access the site. If
: the employee is on a dial-up connection, they get the prompt for their
: username and password, but the authentication fails.
:
: What is there different in a dial-up connection versus a broadband
: connection that would deny access with the same username and password?
:
:
: Bryan Weaver
:
: