Basic Authentication

[Previous] [Next]

Available in IIS 4?

Yes. All versions of IIS have supported basic authentication.

What privileges are required?

By default, the accounts logging on must have the Logon Locally logon right, although this is configurable through the LogonMethod ADSI property. Refer to Chapter 13, "Security Administration with ADSI, WMI, and COM+" for more information on this property.

Supports delegation?

Limited. The request can leave the Web server and access resources on a remote computer so long as the account exists on both computers and the passwords are the same, or domain accounts are used. However, if Basic authentication is used in conjunction with Active Directory, full delegation is supported.

Delegation capabilities diagram (when Active Directory is not used)

click to view at full size

Delegation capabilities diagram (when Active Directory is used)

click to view at full size

Requires Active Directory?

No. However, if Active Directory is used, delegation is fully supported.

Browser support

All. Basic is a well-supported authentication protocol.

Works through proxies and firewalls?

Yes.

Other notes

Basic authentication is defined in RFC 2617 (available at http://www.ietf.org/rfc/rfc2617.txt).



Designing Secure Web-Based Applications for Microsoft Windows 2000 with CDROM
Designing Secure Web-Based Applications for Microsoft Windows 2000 with CDROM
ISBN: N/A
EAN: N/A
Year: 1999
Pages: 138

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net