33.2 IIS Authentication
Internet Information Services (ISS)[ 148 ] is Microsoft's standard web server in Windows. In production systems, it is usually the case that IIS is used on Windows machines and that Apache is not used. The IIS offers a range of authentication options. However, some of these are not suitable for web use. The integrated Windows authentication via Kerberos is only useful for intranets, for example, as the client and server should belong to the same domain.
Basic authentication (standard authentication) and digest authentication, which you already know from Apache, come into question here. The IIS uses the same HTTP capabilities. The major disadvantage of IIS compared to Apache is that existing Windows user accounts are ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access