Solved

How to Password Protect a Web Directory

Posted on 2004-08-18
12
618 Views
Last Modified: 2010-04-11
I want to Password Protect an entire web directory and all subdirectories without having to use include files on every single file.
Can I do this in one location?

Thanks,

-Brett
0
Comment
Question by:brettz
  • 4
  • 4
  • 3
  • +1
12 Comments
 
LVL 1

Expert Comment

by:mgrass
ID: 11834970
What's the OS?
0
 
LVL 2

Expert Comment

by:xscousr
ID: 11835101
and what is the webserver? IIS? Apache?
0
 

Author Comment

by:brettz
ID: 11835130
Sorry, I forgot that critical info.

OS: Windows 2000 Server
Webserver: IIS
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 1

Expert Comment

by:mgrass
ID: 11835177
Right-click the folder where your site resides in inetpub and select security.  Remove any internet guest account or everyone account (that is the anonymous access) that is present.  That will prompt a visitor for NT credentials; once provided they're in.  
0
 

Author Comment

by:brettz
ID: 11835201
Well, I forgot something else.

I want to do this by having users validate through an API script and not Windows NT Authentication.
Is this possible?

-Brett
0
 
LVL 1

Expert Comment

by:mgrass
ID: 11835235
I'm sure it is.  
I don't have a clue how though.  :)
If you will give as much detail as you can, I'm sure some expert will be able to set you right up.

Mike
0
 
LVL 2

Expert Comment

by:tonyhowarth
ID: 11835780
There's a product called Authentix from Flicks software.

It's really good, very easy to install and configure and will do exactly what you require.  It basically installs itself as an asapi filter.  Then you can auto logon someone from you own API (samples provided) or have Authentix challenge the user.

Have used it for years and I would highly recommend it.

Tony
0
 

Author Comment

by:brettz
ID: 11840919
Thanks Tony that looks great, but I don't have the money to buy it.  Only a free trial is available.
Does anyone know of any Freeware that will do this OR has anyone ever done this in their own code?
0
 
LVL 2

Expert Comment

by:tonyhowarth
ID: 11841164
Write it yourself....it's only a ISAPI filter and if you want a basic one that cannot cope with millions of users (like Authentix) then it should be that tricky?

Tony
0
 

Author Comment

by:brettz
ID: 11841370
I would like to write it myself.  The reason I came here is because I don't know how. Can someone directy me to a site where I can learn how to write an ISAPI filter that uses an API logon or view someone's code who has done this to get ideas?

Thanks,

-Brett
0
 
LVL 1

Expert Comment

by:mgrass
ID: 11841449
Lots of ISAPI resources here:  http://www.dataweb.de/en/support/isapi.html
It's just a matter of googling it all up.
0
 
LVL 2

Accepted Solution

by:
tonyhowarth earned 50 total points
ID: 11841457
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Compromised PC? 17 219
use subinacle for permission translation on Win 10 machine 3 50
CPU at 100% usage, why? 27 133
server core and windows updates 3 40
If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
With healthcare moving into the digital age with things like Healthcare.gov, the digitization of patient records and video conferencing with patients, data has a much greater chance of being exposed than ever before.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question