返回
-
标题
ARS 7.X Web Interface - Authentication remains valid after password change -
说明
When running an IIS site with "Basic Authentication", the user does not get prompted to authenticate after his/her password has been changed. -
原因
This is not an Active Roles related issue but the result of how Microsoft authentication works. -
解决办法
Enable Windows Authentication:
-
其他信息
How to make Windows Authentication prompt a user when opening the ARS WI?:
Remove Kerberos Provider and use NTLM. The default logon type with Windows Authentication is Kerberos (users token). But if it can't get a token it fails to NTLM, where the user is prompted to authenticate.
Note: If the URL is not in either the Trusted or Intranet zone, Kerberos Authentication will not be used, as IE will only hand over the ticket to one of those two zone (Internet and Untrusted are never sent a token). However Firefox and Chrome would also need the ARS websites URL included in their config settings, as they tend to ignore Windows "Internet Option" and the zone settings.