IE7, IIS and digest authentication

I have a web server with Win 2003 Server and IIS 6 installed with the
HttpAuthentication update KB 904942. I installed IE7 on the windows 2003
server.
The website uses digest authentication.
I used the IE7 installed on windows 2003 and it was able to authenticate the
user successfully on the website with digest. The browser sent the right
authentication headers

I then installed IE7 on a windows xp system and used to fiddler to spoof the
headers. The authentication always fails because the IE7 on windows XP never
sends any authentication headers? I cannot get a XP client with IE7 to digest
authenticate it self on windows 2003 3 IIS 6 webserver. Can some one tell me
how to sort this out?
Sri [ Mi, 14 Februar 2007 11:25 ] [ ID #1629211 ]

Re: IE7, IIS and digest authentication

Hi,

Are you saying that IIS sends back a 401 with the necessary WWW-Authenticate
headers, but IE never sends back any credentials (even after you provide
them)?

What happens if you take Fiddler out of the loop?

Cheers
Ken


"sri" <sri [at] discussions.microsoft.com> wrote in message
news:1493CD19-7484-48E4-8B48-E7028EB38985 [at] microsoft.com...
>I have a web server with Win 2003 Server and IIS 6 installed with the
> HttpAuthentication update KB 904942. I installed IE7 on the windows 2003
> server.
> The website uses digest authentication.
> I used the IE7 installed on windows 2003 and it was able to authenticate
> the
> user successfully on the website with digest. The browser sent the right
> authentication headers
>
> I then installed IE7 on a windows xp system and used to fiddler to spoof
> the
> headers. The authentication always fails because the IE7 on windows XP
> never
> sends any authentication headers? I cannot get a XP client with IE7 to
> digest
> authenticate it self on windows 2003 3 IIS 6 webserver. Can some one tell
> me
> how to sort this out?
>
>
Ken Schaefer [ Mi, 14 Februar 2007 12:10 ] [ ID #1629212 ]

Re: IE7, IIS and digest authentication

Are you saying that IE7 on XP Pro with KB 904942 does not complete
Digest Auth with IIS6?

Take Fiddler out of the picture.

FYI: I have IE7 on XP Pro with KB 904942 which does Digest Auth
against IIS6 just fine.



//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//



On Feb 14, 2:25 am, sri <s... [at] discussions.microsoft.com> wrote:
> I have a web server with Win 2003 Server and IIS 6 installed with the
> HttpAuthentication update KB 904942. I installed IE7 on the windows 2003
> server.
> The website uses digest authentication.
> I used the IE7 installed on windows 2003 and it was able to authenticate the
> user successfully on the website with digest. The browser sent the right
> authentication headers
>
> I then installed IE7 on a windows xp system and used to fiddler to spoof the
> headers. The authentication always fails because the IE7 on windows XP never
> sends any authentication headers? I cannot get a XP client with IE7 to digest
> authenticate it self on windows 2003 3 IIS 6 webserver. Can some one tell me
> how to sort this out?
David Wang [ Mi, 14 Februar 2007 13:19 ] [ ID #1629216 ]
Webserver » microsoft.public.inetserver.iis.security » IE7, IIS and digest authentication

Vorheriges Thema: Unable to authenticate via kerberos to IIS site accepting client c
Nächstes Thema: Allow http, but deny ftp