Site Maintenance at 10:00PM The site will be offline for hosting changes. Downtime: 30-45m

+ Post New Thread
Results 1 to 6 of 6
Internet Related/Filtering/Firewall Thread, Mapped DNS hostname to intranet, now asks for user/pass? in Technical; Our internet home page points to the intranet server and has always just used the actual server name, however I ...
  1. #1
    dgsmith's Avatar
    Join Date
    Nov 2007
    Location
    Merseyside, England
    Posts
    1,104
    Thank Post
    118
    Thanked 90 Times in 78 Posts
    Rep Power
    36

    Mapped DNS hostname to intranet, now asks for user/pass?

    Our internet home page points to the intranet server and has always just used the actual server name, however I have wanted to move to a more consistent setup using our main domain name (thus setting an internal DNS mapping to intranet.ourdomain.com).

    Quite bizarrely, for half the school (mixed students, staff) this asks for a username/password to the actual web server (popup challenge box) whereas the other half it loads up the index.php as expected. For those who get the user/pass challenge, they can manually browse to the intranet by going direct to the server without issue.

    Any reason why this would be happening? In IIS 7.5 (Win Svr 2k8 R2) we use Windows authentication (as there are a few things that we need this for, such as determining whether they're staff or student and auto login to mrbs etc); if we enable anon auth then it causes other issues.

    Is this something simple that needs changing?

  2. #2

    Join Date
    Jun 2011
    Posts
    18
    Thank Post
    4
    Thanked 2 Times in 2 Posts
    Rep Power
    7
    If you are using kerberos the spn for the service account might be wrong. In the authentication page there is a providers page. Move ntlm to above negotiate and this will force ntlm first.

  3. Thanks to diagdave from:

    dgsmith (8th November 2013)

  4. #3
    dgsmith's Avatar
    Join Date
    Nov 2007
    Location
    Merseyside, England
    Posts
    1,104
    Thank Post
    118
    Thanked 90 Times in 78 Posts
    Rep Power
    36
    ah yes, I remember something about this.. sure I had done it but when checked it does seem NTLM was 2nd best, so to speak! Will see what that does next week.. thanks for reminding me about that

  5. #4

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,808
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    You might need to add it as a trusted sitealso- If windows suspects the site is external it will not pass creds through as far as I know (otherwise anybody could try and request your creds

  6. Thanks to glennda from:

    dgsmith (11th November 2013)

  7. #5

    Join Date
    Nov 2012
    Posts
    9
    Thank Post
    0
    Thanked 4 Times in 3 Posts
    Rep Power
    0
    Check what zone IE thinks its in, as said above if it says internet zone then NTLM auth wont work. When I had this issue I added them to the intranet zone, I don't think trusted sites worked for me as IE still saw it as a (trusted) external. Cached profiles might also cause you a few issues (well they did for me but that could just be CC4)

  8. Thanks to Dooms_Dave from:

    dgsmith (11th November 2013)

  9. #6
    dgsmith's Avatar
    Join Date
    Nov 2007
    Location
    Merseyside, England
    Posts
    1,104
    Thank Post
    118
    Thanked 90 Times in 78 Posts
    Rep Power
    36
    Seems to have sorted it now, thanks!

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 3
    Last Post: 29th August 2012, 02:47 PM
  2. Live@Edu Exchange keep asking for user credentials
    By bwestlake in forum Cloud Services
    Replies: 2
    Last Post: 17th April 2012, 11:23 AM
  3. Replies: 9
    Last Post: 6th October 2011, 02:54 PM
  4. Replies: 1
    Last Post: 18th August 2009, 07:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •