Hi.
I've been developing web browser based tool running off a set of Perl CGI scripts and web pages to be served via IIS and I want to control access to it via Active Directory. I have them stored in one directory so basically I want to protect the entire directory.
Does anyone know if I can set this up automatically in IIS 5.0 or if I have to create my own scripts/web pages to prompt for username/password details and then validate this against an entry in the Active Directory? If so, how do I prevent users from bypassing this and creating their own http requests to pages in my directory? Do I use cookies? Or do I use a combination of setting up IIS in some way and managing users via code in my perl scripts and web pages?