Issue with username set to Guest instead of client username

microsoft.public.inetserver.iis.security

31 May 2009 8:50 PM

dom

Hi,

I have an issue with IIS 6 on Windows Server 2003 SP2, on something that is
working on Windows XP, IIS5.

My users are coming from a different domain, with no trust relationship.
I need all users to have access to a tomcat application.
The client are running IE, with the web site in their trusted list, and have
IE configured to send credentials via NTLM.

So, I need IIS to accept users, coming from a defined subnet, has long as
they use NTLM to access. Then pass the username to the application.

So far, all the users have access, the NTLM challenge is working fine.
However, the
username passed to the application is 'Guest' when the user is unknown by my
server.

I have made similar configuration on a Windows XP with IIS 5, and the
username is passed to the application.
Can you help me figure out what I need to configure differently on Windows
Server 2003/IIS 6, so the application gets the client username?

To troubleshoot this I used a brand new installation of Windows Server
2003/IIS 6 to be as close as possible to a default configuration.
I created virtual directory called 'webtest', place into this directory a
basic html file: index.htm
Then, selected 'Windows Authentication' for the webtest directory, and add
read permission to 'Everyone' on that directory. I needed to Enable 'Guest
account' in the local policy settings.

With this config, any user accessing the site is able to access the page
from any domain or workgroup. That is what I needed, so I am happy about
this.

But if I look into IIS logs, I see that the cs-username is <my server
hostname>\Guest.
When I need to have <my server hostname>\<client username>

Why do I have a different behavior with Windows XP/II 5?
How can I configure Windows Server 2003/IIS 6 to present the client username
instead of 'Guest' and still let everyone access?

Thanks