IIS Server Security - Anonymous access failing when using a fully qualified hostname

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2005 > Anonymous access failing when using a fully qualified hostname





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Anonymous access failing when using a fully qualified hostname
Brett

2005-11-09, 5:52 pm

It's been awhile since I configured IIS and I'm having difficulty with
initial setup in our lab.

Anonymous access to a default website works if in a browser i type the alias
hostname for a machine or abbreviated URL, but does not work when I type a
fully qualified hostname in which case I get a user login prompt. I'm trying
to get rid of the user login prompt.

For example:
URL entry: http://webserver (works fine and displays the default page)
UTL entry: http://webserver.rso.gov (prompts for a domain login and after
authenticating, displays the page fine)
URL entry: http://www (works fine and displays the default page)
URL entry: http://www.rso.gov (prompts for a domain login and after
authenticating, displays the page fine)
URL entry: http://IPaddressofwebserver (prompts for a domain login and
after authenticating, displays the page fine)

The webserver name is in dns and also has an alias in dns for www.rso.gov.
The AD domain is also known as rso.gov.

Brett
Miha Pihler [MVP]

2005-11-09, 5:52 pm

Hi Brett,

If also Integrated Authentication selected?

Does IUSR account have at least read permissions on the content of your
website? IIS will honor NTFS permission...

Do all above addresses point to same folder on the hard drive? Did you use
host header names or?

--
Mike
Microsoft MVP - Windows Security

"Brett" <Brett@discussions.microsoft.com> wrote in message
news:F1DA058D-2477-4C0E-AF7E-118A256492F7@microsoft.com...
> It's been awhile since I configured IIS and I'm having difficulty with
> initial setup in our lab.
>
> Anonymous access to a default website works if in a browser i type the
> alias
> hostname for a machine or abbreviated URL, but does not work when I type a
> fully qualified hostname in which case I get a user login prompt. I'm
> trying
> to get rid of the user login prompt.
>
> For example:
> URL entry: http://webserver (works fine and displays the default page)
> UTL entry: http://webserver.rso.gov (prompts for a domain login and after
> authenticating, displays the page fine)
> URL entry: http://www (works fine and displays the default
> page)
> URL entry: http://www.rso.gov (prompts for a domain login and after
> authenticating, displays the page fine)
> URL entry: http://IPaddressofwebserver (prompts for a domain login and
> after authenticating, displays the page fine)
>
> The webserver name is in dns and also has an alias in dns for www.rso.gov.
> The AD domain is also known as rso.gov.
>
> Brett



Bernard Cheah [MVP]

2005-11-14, 2:49 am

Refer
Intranet site is identified as an Internet site when you use an FQDN or an
IP address
http://support.microsoft.com/?id=303650

make sure you enable anonymous access and the iusr acc has at least READ
permission on the files.

--
Regards,
Bernard Cheah
http://www.iis-resources.com/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


"Brett" <Brett@discussions.microsoft.com> wrote in message
news:F1DA058D-2477-4C0E-AF7E-118A256492F7@microsoft.com...
> It's been awhile since I configured IIS and I'm having difficulty with
> initial setup in our lab.
>
> Anonymous access to a default website works if in a browser i type the
> alias
> hostname for a machine or abbreviated URL, but does not work when I type a
> fully qualified hostname in which case I get a user login prompt. I'm
> trying
> to get rid of the user login prompt.
>
> For example:
> URL entry: http://webserver (works fine and displays the default page)
> UTL entry: http://webserver.rso.gov (prompts for a domain login and after
> authenticating, displays the page fine)
> URL entry: http://www (works fine and displays the default
> page)
> URL entry: http://www.rso.gov (prompts for a domain login and after
> authenticating, displays the page fine)
> URL entry: http://IPaddressofwebserver (prompts for a domain login and
> after authenticating, displays the page fine)
>
> The webserver name is in dns and also has an alias in dns for www.rso.gov.
> The AD domain is also known as rso.gov.
>
> Brett



karl levinson, mvp

2005-11-17, 2:51 am

Agreed. Try adding the FQDN to your browser's Local Intranet zone.


"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:uLX9QYP6FHA.3416@TK2MSFTNGP15.phx.gbl...
> Refer
> Intranet site is identified as an Internet site when you use an FQDN or an
> IP address
> http://support.microsoft.com/?id=303650
>
> make sure you enable anonymous access and the iusr acc has at least READ
> permission on the files.
>
> --
> Regards,
> Bernard Cheah
> http://www.iis-resources.com/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "Brett" <Brett@discussions.microsoft.com> wrote in message
> news:F1DA058D-2477-4C0E-AF7E-118A256492F7@microsoft.com...
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com