cffileupload IIS Windows Integrated Authentication

[Guest]

I have a site that is using WIA on IIS7. The SWF object in cffileupload does not use the browser's security to connect to the server. The object is getting 401 errors when it calls the upload page. All this code works as expected on my local box which does not have WIA.

This should either be noted in the documentation or logged as a bug.

[tclaremont]

Does the username used to start and run ColdFusion on the server have rights to the directory in question? I suspect that is the reason it is bombing. Not sure I would consider it a bug.

[Guest]

Yes, the CF user has access to the directory. Otherwise, none of the code would run.

I have looked at the HTTP being generated by the Flash object and compare it with what the browser is sending. The Flash object does not pass NLM authentication. It passes no authentication - hence the 401 error. The browser passes NLM authentication with every call - hence, no 401 error.

This is either a bug or a feature depending on how Adobe decides to call it.