|
Home > Archive > IIS Server Security > July 2005 > Why is login requesting domain for some users?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Why is login requesting domain for some users?
|
|
| Frank Rowe 2005-07-18, 5:52 pm |
| I have a public web with a few restricted sub-webs, which I authenticate
using basic (clear text) authentication. For most users when they try to
access a restricted sub-web, they're prompted for username & password. When
they supply these, they're in OK.
For a few users, their prompt includes username, password AND domain. The
server is not in a domain, it's configured as standalone.
Here's the kicker - nweh I try to troubleshoot this by looking at the log
files and event viewer - there are no entries. I have entries for other
logins (success and failure) - but not for these users. Apparently these
logins are never getting to my system at all.
Question - what setting localy could cause this domian to appear on the
login screen - then fail to send any login info to my server?
| |
| Bernard Cheah [MVP] 2005-07-19, 2:48 am |
| I'm suspecting you are seeing the domain field in IE that are with w2k
machine, afaik, IE in xp or above only has username and password fields.
Just leave the domain empty, by entering username/password you can't login?
Can you post few entires of the IIS log here?
--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"Frank Rowe" <frank.rowe@robins.nospam.af.mil> wrote in message
news:%232U5el9iFHA.2904@tk2msftngp13.phx.gbl...
>I have a public web with a few restricted sub-webs, which I authenticate
> using basic (clear text) authentication. For most users when they try to
> access a restricted sub-web, they're prompted for username & password.
> When
> they supply these, they're in OK.
> For a few users, their prompt includes username, password AND domain. The
> server is not in a domain, it's configured as standalone.
>
> Here's the kicker - nweh I try to troubleshoot this by looking at the log
> files and event viewer - there are no entries. I have entries for other
> logins (success and failure) - but not for these users. Apparently these
> logins are never getting to my system at all.
>
> Question - what setting localy could cause this domian to appear on the
> login screen - then fail to send any login info to my server?
>
>
| |
| Frank Rowe 2005-07-19, 5:54 pm |
| The user is running Win 2K, so you're right about that aspect.
We've tried leaving domain blank, using the server's machine name, workgroup
name, IP domain - nothing works.
As I said earlier, the login isn't even getting to my server - so there are
no log entries to show.
"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:u5o9A#AjFHA.2904@tk2msftngp13.phx.gbl...
> I'm suspecting you are seeing the domain field in IE that are with w2k
> machine, afaik, IE in xp or above only has username and password fields.
> Just leave the domain empty, by entering username/password you can't
login?
>
> Can you post few entires of the IIS log here?
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
| |
| Bernard Cheah [MVP] 2005-07-20, 7:53 am |
| How about looking at the iis log file ?
default path %windir%/system32/logfiles/w3svcX
x - site id.
--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"Frank Rowe" <frank.rowe@robins.nospam.af.mil> wrote in message
news:O5vtlnJjFHA.1968@TK2MSFTNGP14.phx.gbl...
> The user is running Win 2K, so you're right about that aspect.
> We've tried leaving domain blank, using the server's machine name,
> workgroup
> name, IP domain - nothing works.
> As I said earlier, the login isn't even getting to my server - so there
> are
> no log entries to show.
>
> "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
> news:u5o9A#AjFHA.2904@tk2msftngp13.phx.gbl...
> login?
>
>
| |
| Frank Rowe 2005-07-23, 2:48 am |
| I know about the iis log file. There are NO entries in the iis log file from
this user.
"Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:eYfNUdQjFHA.1968@TK2MSFTNGP14.phx.gbl...
> How about looking at the iis log file ?
> default path %windir%/system32/logfiles/w3svcX
> x - site id.
>
> --
> Regards,
> Bernard Cheah
> http://www.microsoft.com/iis/
> http://www.iiswebcastseries.com/
> http://www.msmvps.com/bernard/
>
>
> "Frank Rowe" <frank.rowe@robins.nospam.af.mil> wrote in message
> news:O5vtlnJjFHA.1968@TK2MSFTNGP14.phx.gbl...
>
>
| |
| Bernard Cheah [MVP] 2005-07-24, 3:07 am |
| huh ? you sure? not even fail requests ? check the client ip address? if
it doesn't make it to IIS, then you should check what could be possibly
blocking the request, firewall?
--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/
"Frank Rowe" <rowesouth_nospan@not_earthlink.net> wrote in message
news:ei4OJI0jFHA.2916@TK2MSFTNGP14.phx.gbl...
>I know about the iis log file. There are NO entries in the iis log file
>from this user.
>
>
> "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
> news:eYfNUdQjFHA.1968@TK2MSFTNGP14.phx.gbl...
>
>
|
|
|
|
|