Classic Pipeline: Mixing Forms and Windows Authentication [Answered]RSS

4 replies

Last post Jan 22, 2011 10:37 PM by CarlosAg

  • Classic Pipeline: Mixing Forms and Windows Authentication

    Jan 19, 2011 03:14 PM|RussellMyers|LINK

    I understand that Classic Pipeline mode, while not recommended, does support mixing Forms and Windows authentication modes leaving application developers with the ability to retain their implementations that support both. I do understand that for IIS7 with the single-stage pipeline I can implement an alternative solution that would leave me with this behavior.

    With that said, I must remain both in Classic Pipeline mode and can not change the implementation. As a result, I've selected "Forms Authentication" and "Windows Authentication" within Classic Pipeline mode, which gives my application appropriate behavior. My concern is with the alert that pops up when doing so:

    "Challenge-based and login redirect-based authentication cannot be used simultaneously."

    Clearly this would be true for Integrated Pipeline mode; however, it seems to be invalid within the Classic Pipeline case. Is this assertion correct? Can I indeed use this configuration in Classic Pipeline mode or is there some other ramification of this configuration that I should be aware of?

    Thanks,

    Russell Myers

    authentication forms authorization Windows Authentication pipeline mode

  • Re: Classic Pipeline: Mixing Forms and Windows Authentication

    Jan 22, 2011 10:46 AM|steve schofield|LINK

    Steve Schofield
    Windows Server MVP - IIS
    http://iislogs.com/steveschofield
    http://www.IISLogs.com
    Log archival solution
    Install, Configure, Forget

  • Re: Classic Pipeline: Mixing Forms and Windows Authentication

    Jan 22, 2011 11:08 AM|RussellMyers|LINK

    I've seen it; however, that seems to solve the general question of what to do in Integrated pipeline mode. It does acknowledge that the Classic pipeline mode should work as IIS6 did; however, I'm specifically asking if there is anything I should be truly worried about given the alert message that is present when attempting to use Forms and Windows authentication mode in Classic pipeline mode.
  • Re: Classic Pipeline: Mixing Forms and Windows Authentication

    Jan 22, 2011 01:28 PM|steve schofield|LINK

    Is this the error you see in internet manager?  I'd ignore the error and test your application.   This might be some logic built into the inetmgr to not allow this behavior. 

    Steve Schofield
    Windows Server MVP - IIS
    http://iislogs.com/steveschofield
    http://www.IISLogs.com
    Log archival solution
    Install, Configure, Forget

  • Re: Classic Pipeline: Mixing Forms and Windows Authentication

    Jan 22, 2011 10:37 PM|CarlosAg|LINK

    Indeed you should not worry of that warning if your apppool is running in Classic Mode, the reason we decided to leave it there was because it is still behavior that many user scenarios would be consider incorrect, since most of the time forms authentication uses anonymous authentication and not windows.

    However for users that do require this behavior it is correct to use Classic Mode for that and ignore the message.