|
Home > Archive > IIS Server Security > July 2005 > Please Help! - Advanced Digest With IIS6 - 401.1
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Please Help! - Advanced Digest With IIS6 - 401.1
|
|
| Jan Bühler 2005-07-06, 7:52 am |
| Hi, I recently set up an IIS6 box on a Windows Server 2003 domain controller
to take advantage of the new advanced digest that doesn't need reversible
encryption enabled passwords. I enabled UseDIGESTSSP in the Metabase, and
Digest works... Almost!
You see, say I apply Digest authentication thru the IIS manager MMC snap in
to a whole website which is say, www.test.com. Thing is, when i log onto
www.test.com with IE6 it keeps prompting for the password and ends up with a
"401.1 invalid server credentials". Thing is, if i go to www.test.com/test
the DIGEST authentication works fine. I've tried creating other websites but
the root directory never seems to authenticate. I've never had this on my
old web server running on IIS6 + Windows Server 2003 SP1.
When I swtich to the insecure basic authentication it works just fine.
Any help would be greatly appreciated!
Thanks!
| |
| Ken Schaefer 2005-07-06, 7:52 am |
| 401.1 is Logon Failed, not Invalid Server Credentials
a) Can you confirm the exact error number and message you are seeing?
b) Can you check, in the IIS logfiles, what account IIS is attempting to use
to access the file?
c) Does that account have appropriate NTFS permissions to the file in
question?
Thanks
Cheers
Ken
--
IIS Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Jan Bühler" <jan@rufanundspar.com> wrote in message
news:O$$tDDigFHA.1612@TK2MSFTNGP12.phx.gbl...
: Hi, I recently set up an IIS6 box on a Windows Server 2003 domain
controller
: to take advantage of the new advanced digest that doesn't need reversible
: encryption enabled passwords. I enabled UseDIGESTSSP in the Metabase, and
: Digest works... Almost!
:
: You see, say I apply Digest authentication thru the IIS manager MMC snap
in
: to a whole website which is say, www.test.com. Thing is, when i log onto
: www.test.com with IE6 it keeps prompting for the password and ends up with
a
: "401.1 invalid server credentials". Thing is, if i go to www.test.com/test
: the DIGEST authentication works fine. I've tried creating other websites
but
: the root directory never seems to authenticate. I've never had this on my
: old web server running on IIS6 + Windows Server 2003 SP1.
:
: When I swtich to the insecure basic authentication it works just fine.
:
: Any help would be greatly appreciated!
:
: Thanks!
:
:
| |
| Jan Bühler 2005-07-06, 5:52 pm |
| Hi Ken,
Thank you very much for your answer.
a) Can you confirm the exact error number and message you are seeing?
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.
b) Can you check, in the IIS logfiles, what account IIS is attempting to
use
When access to any folder under the domain (www.test.com/test) it works and
in the IIS logfile I can see the user account I introduced for the digest
authentication:
###2005-07-06 08:20:36 192.168.30.100 GET /index.aspx - 80 GRUPPE\jan
80.38.161.238
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+1.0.3705)
302 0 0###
When I access to the domain alone (www.test.com) it doesn't work, in the IIS
logfiles I can't see any user:
###2005-07-06 08:19:59 192.168.30.100 GET / - 80 - 80.38.161.238
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+1.0.3705)
401 1 2148074248###
c) Does that account have appropriate NTFS permissions to the file in
question?
Yes.
Thanks!
Cheers
Jan
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> schrieb im Newsbeitrag
news:uree%23VigFHA.824@TK2MSFTNGP14.phx.gbl...
> 401.1 is Logon Failed, not Invalid Server Credentials
>
> a) Can you confirm the exact error number and message you are seeing?
> b) Can you check, in the IIS logfiles, what account IIS is attempting to
> use
> to access the file?
> c) Does that account have appropriate NTFS permissions to the file in
> question?
>
> Thanks
>
> Cheers
> Ken
>
> --
> IIS Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
>
> "Jan Bühler" <jan@rufanundspar.com> wrote in message
> news:O$$tDDigFHA.1612@TK2MSFTNGP12.phx.gbl...
> : Hi, I recently set up an IIS6 box on a Windows Server 2003 domain
> controller
> : to take advantage of the new advanced digest that doesn't need
> reversible
> : encryption enabled passwords. I enabled UseDIGESTSSP in the Metabase,
> and
> : Digest works... Almost!
> :
> : You see, say I apply Digest authentication thru the IIS manager MMC snap
> in
> : to a whole website which is say, www.test.com. Thing is, when i log onto
> : www.test.com with IE6 it keeps prompting for the password and ends up
> with
> a
> : "401.1 invalid server credentials". Thing is, if i go to
> www.test.com/test
> : the DIGEST authentication works fine. I've tried creating other websites
> but
> : the root directory never seems to authenticate. I've never had this on
> my
> : old web server running on IIS6 + Windows Server 2003 SP1.
> :
> : When I swtich to the insecure basic authentication it works just fine.
> :
> : Any help would be greatly appreciated!
> :
> : Thanks!
> :
> :
>
>
|
|
|
|
|