• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 676
  • Last Modified:

How to Password Protect a Web Directory

I want to Password Protect an entire web directory and all subdirectories without having to use include files on every single file.
Can I do this in one location?

Thanks,

-Brett
0
brettz
Asked:
brettz
  • 4
  • 4
  • 3
  • +1
1 Solution
 
mgrassCommented:
What's the OS?
0
 
xscousrCommented:
and what is the webserver? IIS? Apache?
0
 
brettzAuthor Commented:
Sorry, I forgot that critical info.

OS: Windows 2000 Server
Webserver: IIS
0
KuppingerCole Reviews AlgoSec in Executive Report

Leading analyst firm, KuppingerCole reviews AlgoSec's Security Policy Management Solution, and the security challenges faced by companies today in their Executive View report.

 
mgrassCommented:
Right-click the folder where your site resides in inetpub and select security.  Remove any internet guest account or everyone account (that is the anonymous access) that is present.  That will prompt a visitor for NT credentials; once provided they're in.  
0
 
brettzAuthor Commented:
Well, I forgot something else.

I want to do this by having users validate through an API script and not Windows NT Authentication.
Is this possible?

-Brett
0
 
mgrassCommented:
I'm sure it is.  
I don't have a clue how though.  :)
If you will give as much detail as you can, I'm sure some expert will be able to set you right up.

Mike
0
 
tonyhowarthCommented:
There's a product called Authentix from Flicks software.

It's really good, very easy to install and configure and will do exactly what you require.  It basically installs itself as an asapi filter.  Then you can auto logon someone from you own API (samples provided) or have Authentix challenge the user.

Have used it for years and I would highly recommend it.

Tony
0
 
brettzAuthor Commented:
Thanks Tony that looks great, but I don't have the money to buy it.  Only a free trial is available.
Does anyone know of any Freeware that will do this OR has anyone ever done this in their own code?
0
 
tonyhowarthCommented:
Write it yourself....it's only a ISAPI filter and if you want a basic one that cannot cope with millions of users (like Authentix) then it should be that tricky?

Tony
0
 
brettzAuthor Commented:
I would like to write it myself.  The reason I came here is because I don't know how. Can someone directy me to a site where I can learn how to write an ISAPI filter that uses an API logon or view someone's code who has done this to get ideas?

Thanks,

-Brett
0
 
mgrassCommented:
Lots of ISAPI resources here:  http://www.dataweb.de/en/support/isapi.html
It's just a matter of googling it all up.
0

Featured Post

Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

  • 4
  • 4
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now