using AD/Windows authentication - multiple prompts

------_=_NextPart_001_01C83DC7.644D53B6
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

The end of this message is something I posted on the TextPattern forums =
but=20
is a php/iis issue really. The long-short of it is I am trying to run =
an=20
intranet site and use the Active Directory security on the server to=20
restrict users to just my people. When running a dynamic site (TXP,=20
WordPress, something home-brewed) the user is asked for credentials =
several=20
times as the page loads... where it's just one prompt for static pages=20
(ending in php, htm, html, etc).

On the same server, running some simple ASP stuff doesn't get the =
mutiple=20
prompts. Is there some kind of keep-alive setting or something that I =
am=20
missing? I really can't if it's IIS or PHP.

Here is what I posted on the TextPattern site:
I know that Windows/IIS doesn't get much love here. but I was hoping =
someone=20
can help me out.

I have a Server 2003/IIS6/PHP/mySQL setup that I have used for a couple=20
years now and it's been great.

I am working on a small intranet site to host some policy documents, org =

charts, etc. I want to secure the site via Acive Directory =
authentication=20
(possibly via SSL but that's later) but am having trouble. In the best =
case=20
scenario I have to enter the user/pass three times before I can enter =
the=20
site. On IE the site loads in stages, on FF (Win) it is blank then loads =

completely after the third user/pass challenge. I think that there is a =
new=20
challenge/response for each portion or level the of site structure - =
meaning=20
that the first response is for index.php and the root level, then a pw=20
request from the images folder and one from the textpattern folder. I am =

inclined to think that is what is going on because on IE you can see the =

Powered With image load after the last password attempt.

The clarify, this isn't using any of the TXP security, just built-in =
Windows=20
directory security.

I made a duplicate site, this time with just basic html pages and =
folders=20
(nothing dynamic, no php blog software, etc) - I applied the same =
security=20
settings as above and was greeted with a logon prompt (what I wanted) =
and=20
was able to logon fine; receiving just the one password request- I could =

click around and few static pages fine, no password prompts. I put a=20
different blog software (not TXP, but PHP based) a few folders deep and =
was=20
able to navigate to it (I had directory browsing on) but once I got to=20
index.php I was prompted to login again and several more times as the =
page=20
loaded.

Does anyone have any idea what is going on?

thanks in advance
Sean

ps. in standard form (anon access turned on) TXP works fine - creating =
new=20
entries, file uploads, etc.

------_=_NextPart_001_01C83DC7.644D53B6--