NT Authentication Problem

[larrygot]

When I secure a ColdFusion file (.cfm) with NT (disabled Anonymous access to file in IIS) we get a password prompt on the web, but even though we enter the correct credentials the prompt keeps popping up. If we do the same with .html or .asp files the credentials are accepted. Help!

 

[andy98]

One suggestion might be to ensure that the username and password for your NT login are the same as ODBC connection username and Password, for your datasource.

 

[SidianConsulting]

You want to make sure the web site security in IIS is set to Anonymous AND Basic Authentication. If a file is secured without EVERYONE and IUSR_MACHINENAME access, you'll get the user/password prompt, and it will work. You probably still have Integrated Windows Authentication checked, so you'll want to make sure the two aforementioned options are checked ONLY.

-Tel

 

[WildWest]

LarryGot, I found the solution...

Everytime a CFM template gets executed on the Web server, it will automatically try to find application.cfm in that directory, then above it, and then above that one, until it finally finds one. When it finally finds an "application.cfm" file, it is outside the authenticated directory up a branch or two. Because of this, the server will automatically challenge the user to login again and again.

So a quick solution is to copy an "application.cfm" file to the directory you want challenged and then it will magically work for you.

Enjoy!