ASP.NET site security
For months, I have been using sites with Integrated Authentication. Now, everytime I make an app pool and a new site, the user is prompted on Integrated Authentication. I even tried it on a blank page, Integrated Authentiction, and Allow All Users. All users are prompted saying connecting to xxx.com and can not access the site at all even after typing in their username/password (unless we're all doing it wrong). The only way I can access the site is to remote desktop into the computer first. Windows Digest Authentication works exactly as it should even remotely, as does Anonymous Authentication and Forms Authentication. I set the site to use an old app pool created before this started happening and it works fine. I open an old app pool, change ANYTHING, and save. All sites using that app pool suddenly start prompting on Integrated Authentication.
I've looked at every single setting in the app pool with one working correctly and one working incorrectly and I can't see a single difference.
This suddenly started happening on all my web servers about a month ago out of nowhere. Also, if I re-boot a server, all the app pools start behaving like this. If I run out of app pools, I'll have to switch everything over to Windows Digest Authentication or create my own database-based security with Forms Authentication, the advantage of the second approach would be that everything would not be so hidden and mysterious. Thanks in advance for any help or suggestions.
|