Bob,

Okay, this is pure theory... I haven't actually tested it, so it might not work at all.

(1) Change your URLs from http://#username#:[EMAIL PROTECTED]/ to http://foo.com/auth/#ToBase64(username & ":" & password)#/

(2) Install ISAPI Rewrite

(3) Create a rewrite condition that looks for /auth/(.*)/

(4) If authorization info is found, rewrite the URL to omit the auth info, and then set the Authorization header to the base64 string in the original URL

Again, *in theory*, you'll end up being able to authenticate without user intervention.

--
Roger Benningfield
JournURL: http://journurl.com/
blog: http://admin.support.journurl.com/
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to