|
Home > Archive > IIS Server Security > December 2005 > Reauthentication required for Office docs and Access Denied error message
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Reauthentication required for Office docs and Access Denied error message
|
|
| Ganesh 2005-12-15, 7:49 am |
| The scenario is :
I have installed SPPS (SharePoint) on IIS6 (on win 2k3 machine). And I
have installed my ISAPI filter for SPPS on IIS. This ISAPI filter
requires Anonymous Authentication to be turned on and it deploys basic
over ldap and form over ldap authentication schemes. I have also
configured impersonation in a wildcard extension dll. I have installed
SPPS on "default web site" and wild card extension is configured for
this site.
The problem is:
When my ISAPI filter is on "web sites"
1) After succeefully authentication to SPPS, when I am trying to open
any MS office doc (e.g. .doc or .xls) I am again asked for my ISAPI
filter authentication. This doesnt happen with .txt or .pdf docs.
2) When I open sharepoint central admin site (site that gets created
under "web sites" when you install sharepoint) I am not able to access
the SPPS portal site. I get "Access denied" error message whenever I
click on any existing session links or open a new session. The central
admin site security is : it does not require Anonymous authentication
and IWA is turned on for this site.
3) After some time duration (there is no fixed time duration but
happens after every 1/2 days) when I am trying to access SPPS reaource
protected by my ISAPI filter, I am directly getting SharePoint "Access
Denied" message. Without prompting me for authentication. If I restart
IIS this starts working fine for another 1/2 days. (Once it worked for
3 days)
Problem 1 and 2 go away when I put my ISAPI filter on Default web site
instead of "web sites". I am not able to understand this behavior
especially with point number 1.
Regarding the third issue is there any application pool setting I need
to do? Is there any way I can debug this more effectively? If I remove
my ISAPI filter then I get the same SPPS access denied message so what
I am suspecting is after some time IIS doesnt recognize my ISAPI
filter. IIS is configured in worker process isolation mode.
Thanks in advance,
Ganesh
| |
| Ratatooie 2005-12-15, 6:04 pm |
| Well for #1, some versions of Office try to open web site files with
read/write authentication, and since it's a different program authenticating
it displays a dialogue.
You have to update the _CLIENT_ computer with new Office service pack
levels, or simply press "Cancel" when the box appears to get it to open read
only, or reauthenticate to open the file in read/write.
For the other issues....
"Ganesh" <ganesh.tambat@gmail.com> wrote in message
news:1134640554.154542.301020@z14g2000cwz.googlegroups.com...
> The scenario is :
>
> I have installed SPPS (SharePoint) on IIS6 (on win 2k3 machine). And I
> have installed my ISAPI filter for SPPS on IIS. This ISAPI filter
> requires Anonymous Authentication to be turned on and it deploys basic
> over ldap and form over ldap authentication schemes. I have also
> configured impersonation in a wildcard extension dll. I have installed
> SPPS on "default web site" and wild card extension is configured for
> this site.
>
> The problem is:
>
> When my ISAPI filter is on "web sites"
>
> 1) After succeefully authentication to SPPS, when I am trying to open
> any MS office doc (e.g. .doc or .xls) I am again asked for my ISAPI
> filter authentication. This doesnt happen with .txt or .pdf docs.
>
> 2) When I open sharepoint central admin site (site that gets created
> under "web sites" when you install sharepoint) I am not able to access
> the SPPS portal site. I get "Access denied" error message whenever I
> click on any existing session links or open a new session. The central
> admin site security is : it does not require Anonymous authentication
> and IWA is turned on for this site.
>
> 3) After some time duration (there is no fixed time duration but
> happens after every 1/2 days) when I am trying to access SPPS reaource
> protected by my ISAPI filter, I am directly getting SharePoint "Access
> Denied" message. Without prompting me for authentication. If I restart
> IIS this starts working fine for another 1/2 days. (Once it worked for
> 3 days)
>
> Problem 1 and 2 go away when I put my ISAPI filter on Default web site
> instead of "web sites". I am not able to understand this behavior
> especially with point number 1.
>
> Regarding the third issue is there any application pool setting I need
> to do? Is there any way I can debug this more effectively? If I remove
> my ISAPI filter then I get the same SPPS access denied message so what
> I am suspecting is after some time IIS doesnt recognize my ISAPI
> filter. IIS is configured in worker process isolation mode.
>
> Thanks in advance,
> Ganesh
>
|
|
|
|
|