Problems with Digest Authentication

Has anyone gotten Digest Authentication to work in IIS?
From what I have read, It requires a domain account on
a Windows 2003 server and that its password be stored
using reversable encryption.

Well, I've done all of these things, but I'm still prompted
3 times for my password and eventually get a 401.1 error.

Any pointers?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

w^rl0rd

I take it I won't be tested on this?
Well, if anyone gets a chance to test it out
I would really like to know what happens.
I just like to know how things work you know?

bmauro

I'm rather new at this so take this with a grain of salt.

I just installed IIS yesterday and was playing around with the different authentication types. I did try Digest Authentication and it did work.

It looked like it was similar to Integrated Windows authentication - were it asked for a AD username and password - but instead of a standard Windows username and password windows, Digest authentication used what looked like a browser login box.

Let me know if you have anyother questions or if I didn't explain myself clearly