Advice on Security Settings

[jmeckley]

I need to create a web app that will be accessed by employees. We run dual platform W2K and Mac OS.

Our apps will use IIS 5, Sql Server 2K and Active Directory. All employees have a domain account in Active Directory. We use Windows authentication with Sql Server.

What would be the best form of authentication? I would want the windows users to automatically be authenticated without the user entering information. I would want MAC users to enter their username and password once and not need to enter it again.

Anynomus access is turned off on IIS and the web config file has deny unknown users. How does Passport authentication work? Is the information stored on the server, local machine? how does it work with non windows OS?

Thanks for your advice.

[Borry]

Hi,


it's me again. Still messing around with that damned security ?

In your webconfig, you can put this line :

<authentication mode="Windows" />

So you'll need to be authenticated in Windows to access the page.

If you need security on certain directories, files then you can set this security in you Windows security settings on those directories. If someone wants to access a directory then they will receive 'Access denied'.

If you're working in a windows environment, then there's no need to implement passport authentication and so on. I'm not sure how you could solve it with your mac users. I should say... Just try 'n test it !

HTH

[Nigh™a®e]

Set your application to windows authentication in your web.config file.

Goto security settings of your site (iis manager)
Disable anonymouse and check on digest authentication for auto login using domain accounts.