It's time to do some explaining that basic authentication with SSL is just as secure (probably more) as Microsoft's proprietary challenge/response (NTLM) scheme, and that you are just as authenticated while using the standards-based approach.
Kevin >>> [EMAIL PROTECTED] 03/19/02 08:47AM >>> That's the issue....they refuse to disable Windows authentication...the connection worked perfectly when they did....the quote from my client: "Windows NT Challenge/Response--in simplistic terms is the user id/password that must be authenticated. We cannot turn this off, as that is what controls your authentication (entering your user id/password) to get to the machine......This authentication must be in place, and your application must be able to find a way to make it work" Here's the CFHTTP statement I'm using: <CFHTTP URL="https://theirserver.com/theirscript.asp"; METHOD="post" THROWONERROR="Yes" TIMEOUT="30" COLUMNS="#get.columnlist#" PORT="443" USERNAME="username" PASSWORD="password"> Ideas?? D ************************ Diana Nichols Webmistress http://www.lavenderthreads.com 770.434.7374 -----Original Message----- From: Garza, Jeff [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 19, 2002 11:38 AM To: CF-Talk Subject: RE: CFHTTP POST - authentication issue HTTPS is no problem for CFHTTP. Just make sure to include the correct port number (443). As for the authentication, make sure that they are only using Basic Authentication. ColdFusion cannot authenticate using Digest or Windows authentication. Perhaps you could show us your CFHTTP statement? Jeff Garza Lead Developer/Webmaster Spectrum Astro, Inc. 480.892.8200 [EMAIL PROTECTED] http://www.spectrumastro.com -----Original Message----- From: Diana Nichols [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 19, 2002 9:00 AM To: CF-Talk Subject: CFHTTP POST - authentication issue I am trying to post a form to a client's server (WIN2K,IIS) using CFHTTP. The process works great - until they enable the login/password on their server. Is there any other method to do this transfer automatically utilizing CF? or JS? (Must use SSL and authenticate via login/password to their server.) TIA! D ************************ Diana Nichols Webmistress http://www.lavenderthreads.com 770.434.7374 ______________________________________________________________________ This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
