IIS6 not logging Authenticated Usernames

[Guest]

Hi,

A part of our ASP website is password protected. People need to create
accounts in order to gain access to the secured website. The username is
email. After the user logs in a session cookie is created. On each secured
page a check is made for session cookie. If this session cookie exists then a
user is allowed to view secured page, if not they are redirected to login
page.

In IIS 6, I checked ‘extended properties’ of W3C Extension Log File Format
and noticed that all the fields have been selected (including cs-username),
but when I look at the log files I see this field showing dashes (-) meaning
IIS 6 is not login usernames.

Can someone tell me what could be the problem here and how to fix it?

Thanks,

Joe

 

[Bruce Barker]

iis only logs the name used in Authorization header. if you are using forms
authenication, then iis has no knowledge of the user name. you could write
you own log filter to log the asp.net name.

hint: add a custom header in the response with the name that the filter can
pick up.

-- bruce (sqlwork.com)