I'm attempting allow/restrict website intranet users access based on Active Directory permissions.
I thought we'd reached our objective (authentication without domain sign-on prompt) until I discovered that pages (or even text files) accessed via our popular browsers Chrome/IE11/Firefox result in three requests for the same asset, two which of which fail with a 401 response code.
Capturing this with Charles Proxy it would look as such:
HTTP/1.1 401 Unauthorized HTTP Error 401. The requested resource requires user authentication
HTTP/1.1 401 Unauthorized 401 - Unauthorized: Access is denied due to invalid credentials
HTTP/1.1 200 OK
The specifics of these requests/responses can be seen here: http://pastebin.com/raw.php?i=3iBiGqHc
These happen in rapid succession, as if the browser is attempting retires. The resolution isn't sticky, and the browser will continue to request files in triplicate.
Are we missing a configuration setting somewhere?
PHP 5.6.9, IIS 7.5, Windows Server 2008 R2 SE SP1