ISAPI problem OnAuthentication

Hi all

First of all, let me expose the problem:

We have a SharePoint server under IIS, the access to the site is
filtered by Netegrity SiteMinder ISAPIWebAgent ISAPI filter that
checks wether the user has a valid certificate for accessing the site.
After this, I need to pass SharePoint a windows account so I activate
Basic Authentication on the site. The problem we have is that
siteminder ISAPI filter clears Basic Authentication login information
and the behaviour we see is that we can't pass the login form, if we
enable Anonymous Access, I can see in the Request that siteminder has
changed AUTH_USER and AUTH_PASSWORD parameters so this is why I think
that later when I enable Basic Authentication it fails.

What I'm trying to do:

I've created a new Authentication ISAPI filter that simply provides a
valid user login at runtime
(something like:
  strcpy(pAuthent->pszUser, "<valid_user>");
  strcpy(pAuthent->pszPassword, "<valid_pass>");
)
so fixing login information so that if siteminder changes it before,
then I provide a valid one (hardcoded, I know).

What happens:

It seems that SiteMinder ISAPI filter executes before and after
processing the OnAuthentication event may return with
SF_STATUS_REQ_HANDLED_NOTIFICATION code because my custom ISAPI filter
doesn't get executed. If I change ISAPI filter execution order and
execute my filter first should work ??

This is the problem, I'd like to know if there's a better way to solve
it that I haven't thought about, also if not, how can I get my ISAPI
filter executed after the SiteMinder one even if the later returns
handled notification or if executing my filter first will solve it
(remember that SiteMinder apparently clears login info when it
executes)

Any help will be really appreciated, I don't know what else to try to
solve this, thx in advance.

ori<!-- ~MESSAGE_AFTER~ -->

What do you actually want to do, and what IIS version are we talking about.

It sounds like you have an identity whose credentials you first verify with
Netegrity. If it succeeds, then you want to map that identity to a Windows
account so that Sharepoint works.

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"ORi" <ori DeleteThis @bbs-ce.uab.es> wrote in message
news:73b37c5e.0410050233.6aab8d41@posting.google.com...
Hi all

First of all, let me expose the problem:

We have a SharePoint server under IIS, the access to the site is
filtered by Netegrity SiteMinder ISAPIWebAgent ISAPI filter that
checks wether the user has a valid certificate for accessing the site.
After this, I need to pass SharePoint a windows account so I activate
Basic Authentication on the site. The problem we have is that
siteminder ISAPI filter clears Basic Authentication login information
and the behaviour we see is that we can't pass the login form, if we
enable Anonymous Access, I can see in the Request that siteminder has
changed AUTH_USER and AUTH_PASSWORD parameters so this is why I think
that later when I enable Basic Authentication it fails.

What I'm trying to do:

I've created a new Authentication ISAPI filter that simply provides a
valid user login at runtime
(something like:
strcpy(pAuthent->pszUser, "<valid_user>");
strcpy(pAuthent->pszPassword, "<valid_pass>");
)
so fixing login information so that if siteminder changes it before,
then I provide a valid one (hardcoded, I know).

What happens:

It seems that SiteMinder ISAPI filter executes before and after
processing the OnAuthentication event may return with
SF_STATUS_REQ_HANDLED_NOTIFICATION code because my custom ISAPI filter
doesn't get executed. If I change ISAPI filter execution order and
execute my filter first should work ??

This is the problem, I'd like to know if there's a better way to solve
it that I haven't thought about, also if not, how can I get my ISAPI
filter executed after the SiteMinder one even if the later returns
handled notification or if executing my filter first will solve it
(remember that SiteMinder apparently clears login info when it
executes)

Any help will be really appreciated, I don't know what else to try to
solve this, thx in advance.

ori