Web Connection
Admin auth problems
Gravatar is a globally recognized avatar based on your email address. Admin auth problems
  Richard Kaye
  All
  Jan 9, 2020 @ 12:06pm

Here's today's mystery. On my stage server when I access the main admin page, it prompts for my domain account, as it should. I submit my domain creds, and it lets me into that page (admin.aspx). I attempt to bring up any of the other links (log access, edit config files, module administration, etc) and am again prompted for credentials. I enter my credentials again but they are not accepted. I have the loopback disabled key in place. I thought I had followed all the best practices for locking down the admin pages. This happens if I am on a local browser on the server or remotely accessing via a browser on my dev system. While I go trolling through all the documentation and blog posts I can find (again), I thought I'd throw this out to the (West)wind. What am I missing now?

Thanks.

Gravatar is a globally recognized avatar based on your email address. re: Admin auth problems
  Rick Strahl
  Richard Kaye
  Jan 9, 2020 @ 01:09pm

Make sure you have both Windows and Basic Authentication enabled.

Or you can use the WebConnectionModule.dll from the Experimental file which has some additional support for Windows Authentication in the Web Connection admin links. Next version of Web Connection will also have support for authenticating with Windows authentication so basic may no longer be required, but for now Basic is required for anything that hits the Web Connection server.

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: Admin auth problems
  Richard Kaye
  Rick Strahl
  Jan 9, 2020 @ 01:24pm

I do have both enabled in the admin folder.

Gravatar is a globally recognized avatar based on your email address. re: Admin auth problems
  Rick Strahl
  Richard Kaye
  Jan 9, 2020 @ 01:47pm

If it works with Windows Auth (the .NET Module methods on the admin page) and not for the FoxPro ones, it sure sounds like Basic is not enabled. Both are tied into the Windows account database so what works on one should work on the other.

if you applied the loopback fix, you may have to log out/restart to see it work.

+++ Rick ---

© 1996-2020