asp.net - In iis, what does having multiple authentication types on the same app enabled imply? -


i've gone long telling myself, works i'll treat black box.

i can enable anonymous, forms, windows security, etc... if enable multiple of them on same path/app, mean? run? secure take role of verification?

is there point enabling anonymous , windows authentication?

is there way step through authentication process?

this article older versions windows server, logic same http://support.microsoft.com/kb/264921

when browser makes request, considers first request anonymous. therefore, not send credentials. if server not accept anonymous or if anonymous user account set on server not have permissions file being requested, iis server responds "access denied" error message , sends list of authentication types supported using 1 of following scenarios:

  • if windows integrated supported method (or if anonymous fails), browser must support method communicate server. if fails, server not try of other methods.
  • if basic supported method (or if anonymous fails), dialog box appears in credentials, , passes these server. attempts send credentials 3 times. if these fail, browser not connect server.
  • if both basic , windows integrated supported, browser determines method used. if browser supports kerberos or windows nt challenge/response, uses method. not fall basic. if windows nt challenge/response , kerberos not supported, browser uses basic, digest. order of precedence here basic, digest.

Comments

Popular posts from this blog

c# - How Configure Devart dotConnect for SQLite Code First? -

java - Copying object fields -

c++ - Clear the memory after returning a vector in a function -