Geek asks and answers

IIS Windows Strange Authentication

I have a web server with two websites: a and b.
and - production.

b - testing / staging.

Whoever writes these applications, I rely on

Request.ServerVariables("LOGON_USER")

which is assigned when the user authenticates to the server through Windows authentication. On a, this works great, on b there is some kind of weirdness:

I get a login prompt, but I can’t use [domain] \ myusername to log in, I can do this with \\ myusername, albeit with the same passwords (based on AD). The IIS configurations are identical, as far as I can tell, the only inconsistency is the DNS CNAME pointing from a.domain.com to b.domain.com. Changing this DNS record to point to IP fixed the problem, but I'm trying to figure out what is going on.

Previous DNS record: b.domain.com > a.domain.com

Working DNS record: b.domain.com > 10.0.x.131

There should have been b> a> basic Windows authentication, but for some reason I found myself using \\, is it tied to the domain name twice, or something like that? And what exactly does \\ mean with respect to authentication?

Make sense?

+5
source share
1 answer

A few thoughts.

  • What specific OS version is running on your server? Microsoft, in particular, has several different behaviors in different versions, and the documentation has specifics for the version

  • " ", . ( ), " ", " ", , , , .

  • , - , , serverfault.

, "\", , .

, , '\'. "\", . , , Windows , . DNS- CNAME , .

, - DNS , , , escape- ( ). '\' escape- , , escape- ('\').

0

More articles:


All Articles