IIS Server Security - authentication problem IIS6 on Win2003

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2006 > authentication problem IIS6 on Win2003





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author authentication problem IIS6 on Win2003
Georg Bauer

2006-01-19, 8:11 am

Hello!
I really hope, you can help me:

I have installed an ASP-application with exactly the same IIS-definitions on
Win-XP and it works fine!

I try to install the same ASP-application on Windows Server 2003 Standard /
IIS6
I have created 3 separate virtual directorys: for the *.asp, for the *.dll,
for the *.mdb
I have disabled anonymous access and enabled windows authentication on the
*.asp-virtDir
the *.asp-VDir has read-access and Script-only execution-authorization
the *.dll-VDir has read-access and Script-and-Executables
execution-authorization
the *.mdb-VDir has read-write-access and Script-only execution-authorization

I have defined full access for everyone and networkservice on the
parent-directory of the three directorys on my disk, this parent-directory is
located in the root of c:
The three subdirectorys does not have special authorizations

The user, who is logged on is a member of administrator

When I try to start the website with http://localhost/appname then every
timy there appears a login-dialog ("establishing connection to loaclhost").
After entering my userid and password the same dialog appears for every
asp-file included in the start-formular (it is a framed html).

But the correct content does not appear, but in every frame the message:
HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.

I get the same behaviour, even if I try to reach the web-address from my
remote XP

Please help me to get rid of the login-popup

Thanks in advance
Georg



And these are some of the entrys in the IIS-Log:
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2006-01-19 09:04:11
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/ - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/ - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/Default.htm - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLogin.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLegal.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 2
2148074254
2006-01-19 09:04:11 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
....
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogo.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogo.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogin.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSBorder.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSBorder.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLegal.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogin.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLegal.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 0
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLegal.asp - 80 - 127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 401 1
2148074248
2006-01-19 09:06:59 127.0.0.1 GET /plandocs/CSLogin.asp - 80 NAIMUC35\srv
127.0.0.1
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+.NET+CLR+1.1.4322) 200 0 64

Tom Kaminski [MVP]

2006-01-19, 8:11 am

"Georg Bauer" <GeorgBauer@discussions.microsoft.com> wrote in message
news:1C991AA5-DB1C-4E48-ADC7-AD4315B8EDB2@microsoft.com...
> But the correct content does not appear, but in every frame the message:
> HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
> credentials.
>
> I get the same behaviour, even if I try to reach the web-address from my
> remote XP
>
> Please help me to get rid of the login-popup


What this essentially means is either the username you're using does not
exist or the password is worng. Is this a local or domain account?

--
Tom Kaminski IIS MVP
http://www.microsoft.com/windowsser...ty/centers/iis/
http://mvp.support.microsoft.com/
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS


Georg Bauer

2006-01-19, 8:49 pm

Hello Tom,
the username which is used is the one, with which I am logged on at the
2003Server, isn't it?
I am logged on with an user named "srv" and password "x". The user is a
local defined user, it is member of groups "user" and "administrators".
I also have defined a second user "MiaZwoa", with this userid I am logged on
at the remote WinXP. This user is also defined as "administrator" on XP. I
can reach the shared folders on the 2003Server from the remote WinXP, but I
cannot call the website on the 2003Server.

Georg



"Tom Kaminski [MVP]" wrote:

> "Georg Bauer" <GeorgBauer@discussions.microsoft.com> wrote in message
> news:1C991AA5-DB1C-4E48-ADC7-AD4315B8EDB2@microsoft.com...
>
> What this essentially means is either the username you're using does not
> exist or the password is worng. Is this a local or domain account?
>
> --
> Tom Kaminski IIS MVP
> http://www.microsoft.com/windowsser...ty/centers/iis/
> http://mvp.support.microsoft.com/
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
>
>
>

Georg Bauer

2006-01-22, 6:10 pm

Hello Tom,
thanks for your answer, I fixed the problem in a very common way...
I have done a complete reinstall of my Server2003...
And than I implemented my web-application with the same parameter as before
and now it works
Georg

"Tom Kaminski [MVP]" wrote:

> "Georg Bauer" <GeorgBauer@discussions.microsoft.com> wrote in message
> news:1C991AA5-DB1C-4E48-ADC7-AD4315B8EDB2@microsoft.com...
>
> What this essentially means is either the username you're using does not
> exist or the password is worng. Is this a local or domain account?
>
> --
> Tom Kaminski IIS MVP
> http://www.microsoft.com/windowsser...ty/centers/iis/
> http://mvp.support.microsoft.com/
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com