Earlier we had Windows 2003R2 server/IIS 6.0 configuration and VS 2005
We now moved to Windows 20008R2 server/IIS 7.5 configuration and VS 2012
External agencies send HTTP POST to a webpage which has Basic authentication enabled on IIS server and anonymous authentication disabled.
Earlier on old settings, external agencies would send username:password in plain text and IIS authenticated it and let them in.
But now, on new server, if they send plain text, it is rejecting the request with 401-unauthorized error.
and authenticating the request only If they send the Base64 encoded value of 'username:password' with word 'Basic' appended infront of it like:
Basic Basic64encoded_username:Base64encoded_password
Why is this difference?? Can anyone explain? thanks!!
Go to the complete details ...