IIS Server Security - NTFS/Authentication Web Form Problem

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2005 > NTFS/Authentication Web Form Problem





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author NTFS/Authentication Web Form Problem
elegault

2005-01-29, 5:54 pm

I have a website containing two pages, index.htm (which contains just one
line of text) and reviewform.htm (which is a form created in Frontpage to
save info to a db). These pages are being hosted on my WinXP IIS 5.1 Web
server. Index.htm is accessible by the IUSR_computername but reviewform.htm
requires windows authentication.

I can access the pages and even write to the db with without problem when
using the internal IP address (192.168.1.400) provided by a Linksys router.
But when I try to access those same pages using the IP address provided by
Comcast, I am prompted by the username/password field but none of the known
good usernames/passwords that I entered are accepted.

The tested accounts reside in a Web Users group which currently has full
control over reviewform.htm. It still doesn't work. Only when I give the
IUSR_computername and IWAM_computername accounts Read&Execute, List, and Read
permissions on reviewform.htm.

Can someone tell me how I can configure this reviewform.htm (which contains
a Frontpage 2003 form)so it will prompt for username/password and
authenticate properly when accessing using the IP provided by Comcast.

Thank you very much,
elegault
elegault

2005-01-30, 5:51 pm

In addition, my web browser gives this as an error after the third failed
login attempt:
HTTP 401.1 - Unauthorized: Logon Failed

The IIS log states the following:
192.168.1.1, -, 1/30/2005, 11:17:42, W3SVC1, computername, 192.168.1.204,
16, 1526, 4246, 401, 5, GET, /reviewform.htm, -,

The first IP is my router address. I'm not exactly sure why the request is
coming from the router, not from a client IP.

"elegault" wrote:

> I have a website containing two pages, index.htm (which contains just one
> line of text) and reviewform.htm (which is a form created in Frontpage to
> save info to a db). These pages are being hosted on my WinXP IIS 5.1 Web
> server. Index.htm is accessible by the IUSR_computername but reviewform.htm
> requires windows authentication.
>
> I can access the pages and even write to the db with without problem when
> using the internal IP address (192.168.1.400) provided by a Linksys router.
> But when I try to access those same pages using the IP address provided by
> Comcast, I am prompted by the username/password field but none of the known
> good usernames/passwords that I entered are accepted.
>
> The tested accounts reside in a Web Users group which currently has full
> control over reviewform.htm. It still doesn't work. Only when I give the
> IUSR_computername and IWAM_computername accounts Read&Execute, List, and Read
> permissions on reviewform.htm.
>
> Can someone tell me how I can configure this reviewform.htm (which contains
> a Frontpage 2003 form)so it will prompt for username/password and
> authenticate properly when accessing using the IP provided by Comcast.
>
> Thank you very much,
> elegault

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com