Integrated Windows Authentication, where else to look?
I have been trying to have Integrated Windows Authentication for a website that is mostly ran in our local network (which is entirely AD based). We have two servers, server A has our live websites, and server B has the same websites, but for development. Therefore, everything we do, we develop and test on server B before putting out to server A. Both servers are running ISS 6.0 and Windows Server 2003.

So I made the necessary changes to my ASP.Net website on the web.config file:

    <authentication mode="Windows"/>

In ISS, we turned Integrated Windows Authentication on, and turned off annonymous access.

Easily enough, it worked great on server B.

I handled user information using the User.Identity structure on my program.

Apparently we had it solved, until we tried the same thing on server A.

Unexpectedly, although all the settings seem the same, we can't make it work.

So here are the symptoms and some more information for server A:

Situations:

 1 - When Annonymous Access is on, the website comes up

 2 - When IWA is on and Annonymous Access is off, the website DOES NOT come up

 3 - When IWA and Digest are on, Annonymous Access is off, the website DOES NOT come up

 - The website is a Virtual Directory
 - The identity for the AppPool is Network Service
 - We gave users proper access to the folder where files are located
 - The server is in the same domain as users are
 - When trying to run the website on firefox (situation 2 and 3) we get challenged for every single request to the server (images, css, anything), so multiple challenges there
 - When trying to run the website on IE, nothing (situation 2 and 3) comes up
 - Server A and B are patched to the same level

I don't know where else to look. Any ideas??




Integrated Windows Authentication, where else to look?
===

I have been trying to have Integrated Windows Authentication for a website that is mostly ran in our local network (which is entirely AD based). We have two servers, server A has our live websites, and server B has the same websites, but for development. Therefore, everything we do, we develop and test on server B before putting out to server A. Both servers are running ISS 6.0 and Windows Server 2003.

So I made the necessary changes to my ASP.Net website on the web.config file:

    <authentication mode="Windows"/>

In ISS, we turned Integrated Windows Authentication on, and turned off annonymous access.

Easily enough, it worked great on server B.

I handled user information using the User.Identity structure on my program.

Apparently we had it solved, until we tried the same thing on server A.

Unexpectedly, although all the settings seem the same, we can't make it work.

So here are the symptoms and some more information for server A:

Situations:

 1 - When Annonymous Access is on, the website comes up

 2 - When IWA is on and Annonymous Access is off, the website DOES NOT come up

 3 - When IWA and Digest are on, Annonymous Access is off, the website DOES NOT come up

 - The website is a Virtual Directory
 - The identity for the AppPool is Network Service
 - We gave users proper access to the folder where files are located
 - The server is in the same domain as users are
 - When trying to run the website on firefox (situation 2 and 3) we get challenged for every single request to the server (images, css, anything), so multiple challenges there
 - When trying to run the website on IE, nothing (situation 2 and 3) comes up
 - Server A and B are patched to the same level

I don't know where else to look. Any ideas??



