I am getting a login prompt that requires the user to enter the credentials again in an area of our website:
This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection)
This does not happen on IIS6.0, we only get the warning about content being secure and unsecure. It also does not happen when not using SSL with 7.5. This only happens in IIS7.5 with SSL enabled. I am fine with the warning for now as it has always occured,
but the login prompt is new and I need to figure out how to resolve.
The prompt is totally a warning by Internet Explorer, so IIS has no control on it.
You should run the tests carefully. As the correct symptoms are like below,
"This server is requesting that your username and password be sent in an insecure manner" message only appears if the web site is basic authentication without SSL. When the web site is basic authentication with SSL, there is no such message in IE prompt.
(I tested with IE 8 and IIS 7.5).
No matter what IE prompts when the web site uses basic authentication, and it is desired.
Lex Li
http://lextm.com
---------------------------
This posting is provided "AS IS" with no warranties, and confers no rights.
So why does the same setup with IIS6.0 and IE8.0 not prompt for login, while the IIS7.5 and IE8.0 does on the same page? I get the warning, but no prompt to login with iis6.0
This is resolved. The new server is also load balanced (missed this fine point), so this area of the application was making a request on another server causing it to create a new session. We modified the URL so it would not do this.
Marked as answer by Leo Tang - MSFT on May 14, 2010 06:22 AM
I was getting this error as in the content folder, I had some permission issue. Other user groups were added there. I removed them to get rid of this error.
K-Dubb
71 Posts
This server is requesting that your username and password be sent in an insecure manner..
May 11, 2010 09:29 PM|LINK
Hi,
I am getting a login prompt that requires the user to enter the credentials again in an area of our website:
This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection)
This does not happen on IIS6.0, we only get the warning about content being secure and unsecure. It also does not happen when not using SSL with 7.5. This only happens in IIS7.5 with SSL enabled. I am fine with the warning for now as it has always occured, but the login prompt is new and I need to figure out how to resolve.
Thanks!
lextm
4486 Posts
Re: This server is requesting that your username and password be sent in an insecure manner..
May 12, 2010 06:22 AM|LINK
The prompt is totally a warning by Internet Explorer, so IIS has no control on it.
You should run the tests carefully. As the correct symptoms are like below,
"This server is requesting that your username and password be sent in an insecure manner" message only appears if the web site is basic authentication without SSL. When the web site is basic authentication with SSL, there is no such message in IE prompt. (I tested with IE 8 and IIS 7.5).
No matter what IE prompts when the web site uses basic authentication, and it is desired.
http://lextm.com
---------------------------
This posting is provided "AS IS" with no warranties, and confers no rights.
K-Dubb
71 Posts
Re: This server is requesting that your username and password be sent in an insecure manner..
May 12, 2010 03:18 PM|LINK
K-Dubb
71 Posts
Re: This server is requesting that your username and password be sent in an insecure manner..
May 12, 2010 07:59 PM|LINK
This is resolved. The new server is also load balanced (missed this fine point), so this area of the application was making a request on another server causing it to create a new session. We modified the URL so it would not do this.
Swapan Dey
2 Posts
Re: This server is requesting that your username and password be sent in an insecure manner..
Oct 24, 2011 07:13 AM|LINK
Hi,
I was getting this error as in the content folder, I had some permission issue. Other user groups were added there. I removed them to get rid of this error.