|
Home > Archive > IIS Server > September 2005 > IIS 403.2, 403. 5 and 404.2 Errors on IIS
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS 403.2, 403. 5 and 404.2 Errors on IIS
|
|
| basis_consultant@hotmail.com 2005-09-26, 6:02 pm |
| Hello,
As an IIS newbie..We are running IIS 5.0 on Win2000. IIS is used
to service an SAP application. It was working well using http
and port 80. We wanted to add the use of https (SSL) and port 443.
The Windows administrator added a certificate, and configured the SAP
IIS service (I am not sure whether 'service' is the correct term) for
prt 443. Now, the following error appears for both http and https:
HTTP 403.2 - Forbidden: Read Access Forbidden
Internet Information Services
However, when I check the ISS logs, the messages 403.5, 404.2
and 404.3 appear. I am not sure why 403.5 appears as the browser
(On both the ISS server and client) is set for 128 bit.
As for the other errors:
(i) Is there a way that I can trace is more detail exactly
which virtual and physical directories IIS cannot access? They
all seem to have the necessary security settings.
(ii) Why does Explorer display error 403.2 when the log
displays the other errors mentioned?
Any other ideas would be much appreciated.
Thanks,
BASIS Consultant
Here is the IIS log:
2005-09-26 16:50:18 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scripts/wgate/webgui/! - 403 5 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:18 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:18 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scriptuuus/wgate/webgui/! - 404 3 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scriptuuus/wgate/webgui/! - 404 3 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:36 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scripts/wgate/webgui/! - 403 5 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:36 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:36 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:54 10.64.2.102 - W3SVC3 server1 10.64.0.85 443 GET
/scripts/wgate/webgui/! - 403 5 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:54 10.64.2.102 - W3SVC3 server1 10.64.0.85 443 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:54 10.64.2.102 - W3SVC3 server1 10.64.0.85 443 GET
/favicon.ico - 404 2 HTTP/1.1 Mozilla/4.0+(compa
| |
| David Wang [Msft] 2005-09-27, 5:55 pm |
| Here is how I interpret the log file.
There is no 403.5 nor 404.2 logged in there -- IIS5 does not log sub-status
so you have no way to figure it out. The "5" and "2" are actually Win32
error codes meaning "access denied" and "file not found", respectively.
Thus, the 403 5 entry could correspond to your 403.2 response (read access
forbidden), and the 404 2 entry means that the requested URL really does not
exist.
If both requests are supposed to work, then it means your Administrator has
screwed up server configuration and they need to figure out what the right
thing is and fix it.
Regarding your questions:
1. Simple to trace. You see the URL location in the log file. You know which
website ID the log file belongs to. So you look up in IIS Manager for that
website ID and URL to find the containing virtual directory, which should
tell you what physical path it corresponds to.
2. I see nothing immediately wrong other than possible user misconfiguration
of the server. You have not proven which log file entry actually corresponds
to the 403.2 response so you cannot show correctness. Browsers also do all
sorts of "automatic" things behind your back that you do not know about
(that server's would faithfully log), such as retry requests... so that fact
alone can account for everything.
The following are the key entries that you must resolve:
2005-09-26 16:50:18 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scripts/wgate/webgui/! - 403 5 HTTP/1.1
<-- URL looks a little weird - can you make a request to
/scripts/wgate/webgui/! and see what HTTP status/substatus is returned? This
could be the 403.2.
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scriptuuus/wgate/webgui/! - 404 3 HTTP/1.1
<-- This looks like typo -- The "uu" should not be there, and hence the
server rightfully says "404 file/path not found"
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
<-- This says that there is no file corresponding to /favicon.ico on website
with ID#3. Look up the virtual directory configuration for "/" of this
website to make sure it is not broken
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
<basis_consultant@hotmail.com> wrote in message
news:1127758156.502958.324040@g14g2000cwa.googlegroups.com...
Hello,
As an IIS newbie..We are running IIS 5.0 on Win2000. IIS is used
to service an SAP application. It was working well using http
and port 80. We wanted to add the use of https (SSL) and port 443.
The Windows administrator added a certificate, and configured the SAP
IIS service (I am not sure whether 'service' is the correct term) for
prt 443. Now, the following error appears for both http and https:
HTTP 403.2 - Forbidden: Read Access Forbidden
Internet Information Services
However, when I check the ISS logs, the messages 403.5, 404.2
and 404.3 appear. I am not sure why 403.5 appears as the browser
(On both the ISS server and client) is set for 128 bit.
As for the other errors:
(i) Is there a way that I can trace is more detail exactly
which virtual and physical directories IIS cannot access? They
all seem to have the necessary security settings.
(ii) Why does Explorer display error 403.2 when the log
displays the other errors mentioned?
Any other ideas would be much appreciated.
Thanks,
BASIS Consultant
Here is the IIS log:
2005-09-26 16:50:18 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scripts/wgate/webgui/! - 403 5 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:18 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:18 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scriptuuus/wgate/webgui/! - 404 3 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:28 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scriptuuus/wgate/webgui/! - 404 3 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:31 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:36 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/scripts/wgate/webgui/! - 403 5 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:36 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:36 10.64.2.102 - W3SVC3 server1 10.64.0.85 80 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:54 10.64.2.102 - W3SVC3 server1 10.64.0.85 443 GET
/scripts/wgate/webgui/! - 403 5 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:54 10.64.2.102 - W3SVC3 server1 10.64.0.85 443 GET
/favicon.ico - 404 2 HTTP/1.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
2005-09-26 16:50:54 10.64.2.102 - W3SVC3 server1 10.64.0.85 443 GET
/favicon.ico - 404 2 HTTP/1.1 Mozilla/4.0+(compa
|
|
|
|
|