Hello Ole, > Because I didn't get 401 unauthorized from IIS, but 500 internal > server error from the application. That is because of invalid input, > but it means i got past IIS's authentication.
How do you know that? The server might as well encounter an error with the user repository while trying to authenticate the request. 5xx status codes are used to indicate server errors. Applications should use 4xx codes. Then you'd know where the error comes from. cheers, Roland --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
