Browse by Tags

All Tags » IIS » Security   (RSS)
IIS WebDAV Security Advisory
19 May 09 05:49 PM | tristank | 0 Comments   
Today, an IIS 5.0 to 6.0 security advisory was released: Vulnerability in Internet Information Services Could Allow Elevation of Privilege http://www.microsoft.com/technet/security/advisory/971492.mspx If you’re using WebDAV on any version prior to 7.0 Read More...
The Cat's Out Of The Bag: ISA Server will become ForeFront TMG
09 April 08 05:21 PM | tristank | 1 Comments   
So, we all know that ISA 2006 doesn't work on Windows Server 2008 . Massive architectural changes to the IP stack, blah blah, etc, etc. People (uh, yeah, just "people") have been asking about what's to become of ISA Server for a while: "There's Read More...
IIS7 Modules Aplenty - WebDAV, Bitrate Throttling
15 March 08 10:51 PM | tristank | 3 Comments   
New modules, supported by Microsoft, are now officially RTMd (RTWd?) and available for use with IIS 7.0. WebDAV Yay new WebDAV! Yay being able to enable it on specific parts of a site! Yay better! Robert: http://blogs.msdn.com/robert_mcmurray/archive/2008/03/12/webdav-extension-for-windows-server-2008-rtm-is-released.aspx Read More...
"Stacking" NTLM Authentication
11 March 08 05:30 PM | tristank | 0 Comments   
This question came up today (well, actually, it was about four weeks ago I started typing this, but bear with me), and it's been a little while since I've rambled about authentication protocols, so let's enjoy a nice, calm discussion on a Monday Tuesday Read More...
SetSPN improvements in Windows Server 2008! W00t!
21 December 07 05:21 PM | tristank | 0 Comments   
All this stuff is based on a prerelease (RC1) version of Windows Server 2008 and may change before final release. Cheques may not be honoured. I had a happy moment one night in India when the trainer for our IIS 7.0 TTT course discussed some of the Kerberos-related Read More...
401.3, you say? Not 403?
22 October 07 08:35 PM | tristank | 1 Comments   
You're running an IIS 6.0 website, and you have a virtual directory configured for anonymous authentication only (that is, you've un ticked Integrated Windows Authentication). Using a web browser, you try to access a file in that virtual directory. http://example.com/vdir/something.txt Read More...
Tip o' the Week: WEVTUTIL for EVTX/EVT file conversion
05 October 07 05:19 PM | tristank | 2 Comments   
This week, a pointer to a solution to a problem I occasionally hit. Windows Vista (and by extension Windows Server 2008, I assume) utilizes a new EVTX log format for event log exports. It's XML-based, natch. Problem: Everyone's Favourite Log Digestion Read More...
Netmon vs Chimney
23 July 07 02:22 PM | tristank | 1 Comments   
I recently encountered TCP Chimney for the first time in the wild. Short version: Chimney is an offload technology that allows the NIC to deal with up to X TCP connections, with any overflow being handled by Windows. All good: get the NIC dealing with Read More...
KDC_ERR_BADOPTION when attempting constrained delegation
18 June 07 06:50 PM | tristank | 1 Comments   
Hit this earlier while working with someone else on a Kerberos delegation problem. All the SPNs looked right and were registered against the right accounts; all the App Pools were Network Service; from what I'd been told, everything should have been working... Read More...
Kerbi Wiki
12 April 07 05:35 PM | tristank | 1 Comments   
Back from another holiday (I call it the Arnold Rimmer technique) I've been trying to collect, rework and refurbish my thoughts on web-based Kerberos stuff in a personal Wiki. You're welcome to peruse it with the usual disclaimers that I'm frequently Read More...
I want to publish a website to the Internet. How do I enable Kerberos?
02 March 07 11:44 AM | tristank | 0 Comments   
Ya don't. You can't win. But there are alternatives to fighting. Why Not? Windows Kerberos doesn't work in an Internet scenario, it's intranet-only. the client machine must be a member of the same Active Directory forest as the target site. You just can't Read More...

Search

This Blog

Syndication

Page view tracker