BUG: Users Are Prompted for Basic Authentication When Windows Authentication Is Disabled (277362)


The information in this article applies to:

  • Microsoft Commerce Server 2002
  • Microsoft Commerce Server 2000
This article was previously published under Q277362

SYMPTOMS

When you configure your Commerce Server site to use Windows Authentication, and then set the Authentication to None, users are prompted to authenticate using Basic Authentication when they browse the Web site.

CAUSE

When you configure a Commerce Server site for Windows Authentication, the Web server security is changed to Basic Authentication for all files and directories, except the AuthFiles directory (which is set to Allow Anonymous). After you remove Windows Authentication, permissions are not restored to their previous settings.

RESOLUTION

To reset the security on a Web site after you set the Authentication Filter to No Filter, do the following:
  1. Open the Internet Services Manager.
  2. Click to expand <ServerName>, and then expand <Web Site>.
  3. Right-click the directory where your Commerce site is installed, and then click Properties.
  4. On the Directory Security tab, click Anonymous access and authentication control, and then click Edit.
  5. To restore anonymous access to the site, click to check Anonymous access.
  6. Click OK twice to save the changes, and then close the property sheet.
  7. From the Start menu, click Run, and then type IISRESET.
Users should now be able to browse the site without being prompted for authentication.

STATUS

Microsoft has confirmed that this is a problem in Microsoft Commerce Server 2000.

MORE INFORMATION

When you configure Windows Authentication or Custom Authentication for a site, Commerce Server automatically sets the site's security to Basic Authentication (except the AuthFiles directory, which is set to Allow Anonymous). When you change the mode to No Filter, only the Commerce Admin Database is updated with the new authentication mode setting. The permissions on the site itself are not restored because there is no data of the previous permissions.
Modification Type:MajorLast Reviewed:10/22/2003
Keywords:kbbug kbnofix KB277362
©2003 Microsoft Corporation. All rights reserved.