Unfortumately, the patch does not address the real problem.  I quote from
the article:

>Web sites that use XMLHTTP calls along with URLs
> containing user-authentication information in the format
> "username:[EMAIL PROTECTED]" will still be blocked by
> Internet Explorer, even after the latest patch has been
> applied, Microsoft said. However, requests that use the
> XMLHTTP object and proper syntax for breaking out
> username and password information from the HTTP URL
> will now work with browsers that have applied the patch. 

It's unfortunate that this whole mess has occured.
username:[EMAIL PROTECTED] is perfectly valid...  it seems that the patch
is throwing the baby out with the bathwater.

So that brings us back to the need to hack the registry.  I read
Microsoft's KB article instructions on what needs to be changed and I
found it rather unclear.  I did not persue the issue because I solved the
problem a different way:  by using Mozilla as my browser.

Mark Symons
Ipswitch, Inc
Augusta GA

-----Original Message-----
From: Kevin Ogonowski [mailto:[EMAIL PROTECTED]
Behalf Of Kevin Ogonowski
Sent: Wednesday, February 11, 2004 10:04
To: [EMAIL PROTECTED]
Subject: RE: [WhatsUp Forum] After installing MS patch Q832894, can't view
What'sup Gold site


Microsoft has just released a fix to MS04-004. See artical
http://www.computerworld.com/securitytopics/security/holes/story/0,10801,9
0038,00.html?nas=PM-90038
-----Original Message----- 
From: [EMAIL PROTECTED] on behalf of Eyster, Daniel A.

Sent: Wed 2/11/2004 9:47 AM 
To: '[EMAIL PROTECTED]' 
Cc: 
Subject: RE: [WhatsUp Forum] After installing MS patch Q832894, can't view
What'sup Gold site


Well, I found the article posted by Steve Warnock about how to do the reg
fix, but in the registry on the Whats'up Gold server, there isn't a Key
called Feature_HTTP_Username_Password_Disable to create the two DWORDs
under.  I put it in manually and restarted the server Whatsup Gold is on
and I still can't access the site.  

Anyone have an idea?  TIA.

Dan Eyster
Lockheed Martin Space Ops
MCP+I, MCSE NT4.0/2000
(717) 705-5140
[EMAIL PROTECTED]

From: Anthony Valuikas [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 11, 2004 8:09 AM
To: [EMAIL PROTECTED]
Subject: RE: [WhatsUp Forum] After installing MS patch Q832894, can't view
What'sup Gold site

Are you passing username:password in the URL? If so see the threads from
yesterday for the Q article

Tv

I applied mine with no problems.



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Eyster, Daniel
A.
Sent: Wednesday, February 11, 2004 6:57 AM
To: '[EMAIL PROTECTED]'
Subject: [WhatsUp Forum] After installing MS patch Q832894, can't view
What'sup Gold site

This morning my team lead had me install Microsoft's Q832894 patch.  Well,
after install that and rebooting, neither of us could view the What'sup
Gold website.  I can still view it on my XP box that has the patch, but I
didn't reboot it yet.  Anyone know why this is happening?  Should I run
the patch on the server that has What'sup Gold on it?  TIA for your help.

Dan Eyster
Lockheed Martin Space Ops
MCP+I, MCSE NT4.0/2000
(717) 705-5140
[EMAIL PROTECTED]

NOTICE: This confidential message/attachment contains information intended
for a specific individual(s) and purpose. Any inappropriate use,
distribution or copying is strictly prohibited. If received in error,
notify the sender and immediately delete the message.

<<attachment: winmail.dat>>

Reply via email to