Authentication
A traditional front-end server/back-end server deployment handles user authentication in one of two ways:
- Pass-through authentication—The front-end server simply forwards the request to the back-end server, which performs the authentication.
- Dual authentication—The front-end server authenticates the initial user request, then forwards the request to the appropriate back-end server, which authenticates the request again.
Because the front-end server needs to determine the user's identity to forward the request to the appropriate back-end server, pass-through authentication requires an explicit logon. I don't recommend pass-through authentication for OWA access. Pass-through authentication lets anonymous HTTP requests go directly to the back-end server, thus exposing your server to rogue HTTP requests and potential Denial of Service (DoS) attacks. Pass-through authentication is also less desirable than dual authentication because most OWA users prefer to type the simplest possible URL. Figure 3 shows an explicit logon with pass-through authentication. . . .
)
)
)
Register
thanks....
Wil Crijnen October 23, 2003