Ad hoc Apple App 分发 IIS7 Windows 身份验证 IOS 5？
我们通过安全网站为企业应用程序提供了临时发行版。从版本 5 开始，我们在与 IIS7 结合使用时遇到了身份验证问题。用户使用windows用户名和密码登录并单击下载。然后启动“itms-services://?action=download-manifest&url=domain”操作。
iOS 5 之前： 用户转到 url，输入用户名和密码。用户按下下载按钮，再次用户需要输入用户名和密码。该应用程序已安装。
安装 IOS 5 后： 用户转到 url，输入用户名和密码。用户按下下载并得到一个域名“....”未找到。没有再次弹出窗口，也没有凭据，就像之前的 IOS 5 版本一样。
这个解决方案已经工作了半年，但自从 IOS5 以来，它不再工作了...
IIS 日志 当访问该网站并单击包含 Plist 文件的 action=download 时，IIS 显示 401 错误（未经过身份验证）。但是当我在 safari 中通过 url 直接访问 .plist 或 ipa 文件时，我确实会弹出一个弹出窗口来进行身份验证。
IOS 5 中似乎存在一个错误“itms-services://?action=download-manifest&url=domain”操作不支持身份验证......
We have a Add hoc distribution for enterprice apps by a secure website. Since version 5 we have a problem with authentication in combination with IIS7. The user logs in with a windows username and password and clicks download. Then a "itms-services://?action=download-manifest&url=domain" action is been started.
Before IOS 5:
The user goes to url, types the username and password. The user press download and again the user need to type the username and password. The application is been installed.
After installing IOS 5:
The user goes to url, types the username and password. The user press download and get a domain "...." not found. There is no popup again, with the credentials, like before version of IOS 5..
This solution was working for a half year, but since IOS5 it doesnt work anymore...
IIS Log
When going to the website and clicking on the action=download that contains the Plist file the IIS shows 401 errors (not authenticated). But when I access the .plist or ipa file directly by url in safari I do get a POPUP to authenticate.
It look like there is a bug in IOS 5 "itms-services://?action=download-manifest&url=domain" actions does not support to authenticate....
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
检查您的 plist 文件是否指向现有的 ipa 文件。如果您使用 .htaccess 对 ldap 目录进行身份验证，则需要对 plist 访问进行一次身份验证，对 ipa 访问进行一次身份验证。
Check your plist file if it points to an existing ipa file. If you're using .htaccess to authenticate with a ldap directory you'll need to authenticate once for the plist access and once for the ipa access.
这听起来像是双跳问题的一种变体，其中最初提供的凭据没有正确传递到下载例程（或 Web 服务调用等）中的第二步。 http://blogs.msdn .com/b/knowledgecast/archive/2007/01/31/the-double-hop-problem.aspx
您之前必须输入用户名和密码两次的事实似乎支持这一点 建议。您收到的域“...”不存在的错误可能表明传递到第二步的凭据是运行 IIS 的本地计算机帐户。
如果您可以对此过程进行一些记录，我想确定每个步骤中通过的身份验证/凭据是什么。 IOS 5 中的某些内容可能改变了处理模拟的方式，但我认为这可能只是 IIS 设置方式或最终请求传递方式的症状。
This sounds like a variation of the double-hop problem in which the originally supplied credentials are not being appropriately passed to the second step in your download routine (or web service call, etc.). http://blogs.msdn.com/b/knowledgecast/archive/2007/01/31/the-double-hop-problem.aspx
The fact that you previously had to enter the user name and password twice would seem to support this suggestion. The error that you're receiving that domain '...' does not exist could indicate that the credential being passed to step two is a local machine account that IIS is running under.
If you can get some logging on this process I would want to determine what the authentication/credentials are that get passed at each step. It's possible that something in IOS 5 changed the way that impersonation is handled but I think that's likely just a symptom of how either IIS is set up or the final request is being passed.