Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
Permit AD computer accounts access via integrated auth
-
We would like to allow active directory computer accounts to authenticate to Proget to pull packages (processes running as SYSTEM, which use the computer account over the network) - this always returns a 401, even when the accounts are in the correct group for access.
I assume there is a filter applied on the object type when authorising (for users only) - can this please be extended to computers? (Think it should be a simple change)!?
If I'm not correct can you advise how we can permit this?
Thanks
James
Product: ProGet
Version: 4.7.9
-
If you have Windows Integrated Authentication enabled, then it will not be possible to do this. The 401 is occurring before the request even makes it to ProGet, which is how WIA is designed.
You can also set up a second site in IIS without WIA enabled. That would lalow the request to get to ProGet, and if you have an "Anonymous" pseudo-user configured with permissions, then the lack of a credential will be ignored.