DAF 4.X: IIS Authentication Scheme Configuration

IIS Authentication Scheme Configuration

DAF does not support Windows NT Challenge/Response authentication scheme. Therefore, for the filter to work correctly:

Basic Authentication scheme MUST be ENABLED.
Windows NT Challenge/Response scheme MUST be DISABLED.
It is recommended to ENABLE option Allow Anonymous Access. If this option is disabled, it will be necessary to define a valid mapped NT account for each DAF User.

With IIS 4.0

Above options MUST be active for each IIS Web site attached to a DAF User Database. Therefore, they can be set for the "WWW Service" and inherited by each site. Or, they can be set specifically for each IIS Web Site.

1. From the DeskTop task bar, open: Start, Programs, Windows NT 4.0 options Pack, Microsoft Internet Information Service, Internet Service Manager
2. Open the "Console Root" and "Internet Information Server"

To configure the authentication scheme for the "WWW Service":

3a. Select your Physical Server. Choose Action/Properties
4a. In "Master Properties" choose "WWW Service." Press "Edit"
5a. Continue to step 6.

To configure the authentication scheme for a Web Site:

3b. Select a Web Site
4b. Choose Action/Properties
5b. Continue to step 6.

6. Choose "Directory Security"

7. In frame "Anonymous Access and Authentication Control", press "Edit."
9. CHECK "Allow Anonymous Access." If Anonymous Access should be disabled it is recommended to use DAF or NT permission to get the same result.
10. CHECK "Basic Authentication (Password is sent in Clear Text)"
11. UNCHECK "Windows NT Challenge/response"
12. Press OK
13. Close "Management Console"

With IIS 2.0 or 3.0

Open the "Microsoft Internet Service Manager"
Open "WWW Service Properties"
Open "Service"
In password Authentication, check "Basic (clear text)" and uncheck "Windows NT Challenge/response." (For some mysterious reason, I have noticed IIS has some random problem with the basic authentication scheme when "Windows NT Challenge/Response" scheme is checked.)

Last update: Thursday, August 31, 2000 07:13