DirectLink and Windows Passthrough Authentication

Question

I have found that since I have enabled Windows Passthrough Authentication that the DirectLink functionality does not work as described.  Users always get the Windows username/password interrogation when navigating to a link rather than getting the 'DirectLink' account access.  I am trying to set up a webpage rotator for public view in our work area and would like to not have to deal with 'oops it broke because I had to change my password'.

As a side, I tried passing AccountID/Password in the querystring and also get the Windows login popup.

Is there a trick to getting DirectLink to work other than the steps outlined in the Administrators Guide?

I am running NPM 9.5 SP5 HF2, with APM 3.0 SP1 and Additional Web Consoles.  All are running on Windows 2003 Server.

KenKasmar · Answer

This is the response that I got from support.  I had that thought what I read in this thread () indicated that this was not the case and you could use DirectLink and passthrough authentication together.  Am I confused?You can enable both anonymous and windows authentication but once anonymous is enableIIS does not use any other authentication schemes unless NTFS permissions deny access to a resourcehttp://msdn.microsoft.com/en-us/library/aa292114(VS.71).aspxtherefore you can only use either windows authentication or anonymous, directlink is using anonymous, as it uses the account in orion,

KenKasmar · Answer

General setup listed above.

Configuration related to Passthrough Authentication & DirectLink:

* Configured passthrough authentication on all web instances (primary NPM server and 2 additional web consoles) by unchecking 'allow anonymous login' and checking 'Windows Integrated Authentication' in IIS.
* Created 'DirectLink' account in Orion

Accessing Orion using a direct link & using 'AccountID=USER&Password=PASSWORD' (with valid user/pass) both force Windows authentication dialog box asking for Windows username/password, rather than passing access as the 'DirectLink' account.

Also entered a ticket (Case #130208).  Was going to do that eventually but wanted to fish for the 'oh yeah, you gotta do....' first.

bshopp · Answer

Also, might be worthwhile to just open a support ticket too to look into