|
Home > Archive > IIS Server Security > January 2006 > authentication problem IIS6 on Win2003
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
authentication problem IIS6 on Win2003
|
|
| Georg Bauer 2006-01-19, 8:11 am |
| Hello!
I really hope, you can help me:
I have installed an ASP-application with exactly the same IIS-definitions on
Win-XP and it works fine!
I try to install the same ASP-application on Windows Server 2003 Standard /
IIS6
I have created 3 separate virtual directorys: for the *.asp, for the *.dll,
for the *.mdb
I have disabled anonymous access and enabled windows authentication on the
*.asp-virtDir
the *.asp-VDir has read-access and Script-only execution-authorization
the *.dll-VDir has read-access and Script-and-Executables
execution-authorization
the *.mdb-VDir has read-write-access and Script-only execution-authorization
I have defined full access for everyone and networkservice on the
parent-directory of the three directorys on my disk, this parent-directory is
located in the root of c:
The three subdirectorys does not have special authorizations
The user, who is logged on is a member of administrator
When I try to start the website with http://localhost/appname then every
timy there appears a login-dialog ("establishing connection to loaclhost").
After entering my userid and password the same dialog appears for every
asp-file included in the start-formular (it is a framed html).
But the correct content does not appear, but in every frame the message:
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.
I get the same behaviour, even if I try to reach the web-address from my
remote XP
Please help me to get rid of the login-popup
Thanks in advance
Georg
And these are some of the entrys in the IIS-Log:
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2006-01-19 09:04:11
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/ - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/ - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/Default.htm - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLogin.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLegal.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
....
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogo.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogin.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSBorder.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLegal.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogin.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLegal.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLegal.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogin.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 64
| |
| Tom Kaminski [MVP] 2006-01-19, 8:11 am |
| "Georg Bauer" <GeorgBauer@discussions.microsoft.com> wrote in message
news:1C991AA5-DB1C-4E48-ADC7-AD4315B8EDB2@microsoft.com...
> But the correct content does not appear, but in every frame the message:
> HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
> credentials.
>
> I get the same behaviour, even if I try to reach the web-address from my
> remote XP
>
> Please help me to get rid of the login-popup
What this essentially means is either the username you're using does not
exist or the password is worng. Is this a local or domain account?
--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsser...ty/centers/iis/
http://mvp.support.microsoft.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
| |
| Georg Bauer 2006-01-19, 8:49 pm |
| Hello Tom,
the username which is used is the one, with which I am logged on at the
2003Server, isn't it?
I am logged on with an user named "srv" and password "x". The user is a
local defined user, it is member of groups "user" and "administrators".
I also have defined a second user "MiaZwoa", with this userid I am logged on
at the remote WinXP. This user is also defined as "administrator" on XP. I
can reach the shared folders on the 2003Server from the remote WinXP, but I
cannot call the website on the 2003Server.
Georg
"Tom Kaminski [MVP]" wrote:
> "Georg Bauer" <GeorgBauer@discussions.microsoft.com> wrote in message
> news:1C991AA5-DB1C-4E48-ADC7-AD4315B8EDB2@microsoft.com...
>
> What this essentially means is either the username you're using does not
> exist or the password is worng. Is this a local or domain account?
>
> --
> Tom Kaminski IIS MVP
> http://www.microsoft.com/windowsser...ty/centers/iis/
> http://mvp.support.microsoft.com/
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
>
>
>
| |
| Georg Bauer 2006-01-22, 6:10 pm |
| Hello Tom,
thanks for your answer, I fixed the problem in a very common way...
I have done a complete reinstall of my Server2003...
And than I implemented my web-application with the same parameter as before
and now it works
Georg
"Tom Kaminski [MVP]" wrote:
> "Georg Bauer" <GeorgBauer@discussions.microsoft.com> wrote in message
> news:1C991AA5-DB1C-4E48-ADC7-AD4315B8EDB2@microsoft.com...
>
> What this essentially means is either the username you're using does not
> exist or the password is worng. Is this a local or domain account?
>
> --
> Tom Kaminski IIS MVP
> http://www.microsoft.com/windowsser...ty/centers/iis/
> http://mvp.support.microsoft.com/
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
>
>
>
|
|
|
|
|