Reduce authentication traffic (remove anonymous requests)

[Oleg.Ogurok]

Hi all,

We have an ASP.NET 2.0 intranet application on Win2003 server. The
virtual directory is configured to use Windows Intergrated
Authentication only.

Using Fiddler (http://www.fiddlertool.com/fiddler/) we notice that for
each page/image/javascript request IE makes 2 requests. The first one
is using anonymous authentication, and IIS rejects it (HTTP/1.1 401
Unauthorized). The second one uses the integrated authentication, and
the server accepts it and sends the user the data.

I am wondering if there is a way to reduce the "chatter" between the
clients and the server. Can I somehow instruct the IE to try
Intergrated Authentication the first time instead of the Anonymous?
Is there a setting on the server/client?

Thanks,

-Oleg.

 

[bruce barker \(sqlwork.com\)]

no. ntlm is a challenge/response protocol. 2 requests is the optimized mode.
normally its 3.

note: the 401 you see is the server challenge. if you use fiddler to track
first hit, you will an initial 401 without the chanllenge. (look at the
base64 coded data in the header)

-- bruce (sqlwork.com)