[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

How to Password Protect a Web Directory

Posted on 2004-08-18
12
Medium Priority
?
675 Views
Last Modified: 2010-04-11
I want to Password Protect an entire web directory and all subdirectories without having to use include files on every single file.
Can I do this in one location?

Thanks,

-Brett
0
Comment
Question by:brettz
  • 4
  • 4
  • 3
  • +1
12 Comments
 
LVL 1

Expert Comment

by:mgrass
ID: 11834970
What's the OS?
0
 
LVL 2

Expert Comment

by:xscousr
ID: 11835101
and what is the webserver? IIS? Apache?
0
 

Author Comment

by:brettz
ID: 11835130
Sorry, I forgot that critical info.

OS: Windows 2000 Server
Webserver: IIS
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
LVL 1

Expert Comment

by:mgrass
ID: 11835177
Right-click the folder where your site resides in inetpub and select security.  Remove any internet guest account or everyone account (that is the anonymous access) that is present.  That will prompt a visitor for NT credentials; once provided they're in.  
0
 

Author Comment

by:brettz
ID: 11835201
Well, I forgot something else.

I want to do this by having users validate through an API script and not Windows NT Authentication.
Is this possible?

-Brett
0
 
LVL 1

Expert Comment

by:mgrass
ID: 11835235
I'm sure it is.  
I don't have a clue how though.  :)
If you will give as much detail as you can, I'm sure some expert will be able to set you right up.

Mike
0
 
LVL 2

Expert Comment

by:tonyhowarth
ID: 11835780
There's a product called Authentix from Flicks software.

It's really good, very easy to install and configure and will do exactly what you require.  It basically installs itself as an asapi filter.  Then you can auto logon someone from you own API (samples provided) or have Authentix challenge the user.

Have used it for years and I would highly recommend it.

Tony
0
 

Author Comment

by:brettz
ID: 11840919
Thanks Tony that looks great, but I don't have the money to buy it.  Only a free trial is available.
Does anyone know of any Freeware that will do this OR has anyone ever done this in their own code?
0
 
LVL 2

Expert Comment

by:tonyhowarth
ID: 11841164
Write it yourself....it's only a ISAPI filter and if you want a basic one that cannot cope with millions of users (like Authentix) then it should be that tricky?

Tony
0
 

Author Comment

by:brettz
ID: 11841370
I would like to write it myself.  The reason I came here is because I don't know how. Can someone directy me to a site where I can learn how to write an ISAPI filter that uses an API logon or view someone's code who has done this to get ideas?

Thanks,

-Brett
0
 
LVL 1

Expert Comment

by:mgrass
ID: 11841449
Lots of ISAPI resources here:  http://www.dataweb.de/en/support/isapi.html
It's just a matter of googling it all up.
0
 
LVL 2

Accepted Solution

by:
tonyhowarth earned 150 total points
ID: 11841457
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Phishing emails are a popular malware delivery vehicle for attack.  While there are many ways for an attacker to increase the chances of success for their phishing emails, one of the most effective methods involves spoofing the message to appear to …
It’s a season to be thankful, and we’re thankful for users like you who engage on site, solve technology problems, and network with others in the industry. What tech are we most thankful for? Keep reading.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question