|
Home > Archive > IIS Server Security > January 2006 > IIS protocol question
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS protocol question
|
|
| Georg Bauer 2006-01-20, 6:02 pm |
| Hi there,
I use IIS6 on Server2003Standard with isapi-redirector to Tomcat 4.1.31 as
servlet-engine.
Everything works fine, ... but:
every time, I call my servlet (even local or from a client) there are three
entries in the IIS-Log, the first two of them with an error 401
Where are this errors come from ?
Could it be, that this errors are the reason, why I always get NULL from
request.getUserPrincipal().getName() ?
Thanks in advance
Georg Bauer
here are the IIS-log-entries:
==================
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2006-01-20 15:43:21
#Fields: date time s-computername s-ip cs-method cs-uri-stem cs-uri-query
s-port cs-username c-ip sc-status sc-substatus sc-win32-status
2006-01-20 15:43:21 NAIMUC35 127.0.0.1 GET /jakarta/isapi_redirector2.dll -
80 - 127.0.0.1 401 2 2148074254
2006-01-20 15:43:21 NAIMUC35 127.0.0.1 GET /jakarta/isapi_redirector2.dll -
80 - 127.0.0.1 401 1 0
2006-01-20 15:43:21 NAIMUC35 127.0.0.1 GET /jakarta/isapi_redirector2.dll -
80 NAIMUC35\Administrator 127.0.0.1 200 0 0
2006-01-20 15:43:58 NAIMUC35 192.168.0.136 GET
/jakarta/isapi_redirector2.dll - 80 - 192.168.0.1 401 2 2148074254
2006-01-20 15:43:58 NAIMUC35 192.168.0.136 GET
/jakarta/isapi_redirector2.dll - 80 - 192.168.0.1 401 1 0
2006-01-20 15:43:58 NAIMUC35 192.168.0.136 GET
/jakarta/isapi_redirector2.dll - 80 NAIMUC35\MiaZwoa 192.168.0.1 200 0 0
| |
| David Wang [Msft] 2006-01-20, 8:49 pm |
| It depends on what authentication protocol is enabled. It looks like you
have only Integrated authentication enabled (no anonymous).
In that case, the first two 401 are by-design because that is how the
integrated authentication handshake negotiates. If you see repeated
negotiation of authentication, it usually means that the application or
server is not keeping the connection alive across requests (and since
Integrated authentication is connection based, new connection ==
re-negotiate authentication). Inefficient, yes, but the problem is usually
caused by the application or server configuration outside of IIS control.
Here is a description of the Integrated Authentication protocol process (in
the context of some other issue):
http://blogs.msdn.com/david.wang/ar...br />
tion.aspx
Bottom line -- what you see is by-design. If you want to redure the 401s you
have to either fix the application or possibly server configuration.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Georg Bauer" <GeorgBauer@discussions.microsoft.com> wrote in message
news:1BC4ED7F-950A-4D8D-B9C5-10B564FDC89D@microsoft.com...
> Hi there,
> I use IIS6 on Server2003Standard with isapi-redirector to Tomcat 4.1.31 as
> servlet-engine.
> Everything works fine, ... but:
> every time, I call my servlet (even local or from a client) there are
> three
> entries in the IIS-Log, the first two of them with an error 401
> Where are this errors come from ?
> Could it be, that this errors are the reason, why I always get NULL from
> request.getUserPrincipal().getName() ?
>
> Thanks in advance
> Georg Bauer
>
>
> here are the IIS-log-entries:
> ==================
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2006-01-20 15:43:21
> #Fields: date time s-computername s-ip cs-method cs-uri-stem cs-uri-query
> s-port cs-username c-ip sc-status sc-substatus sc-win32-status
> 2006-01-20 15:43:21 NAIMUC35 127.0.0.1 GET
> /jakarta/isapi_redirector2.dll -
> 80 - 127.0.0.1 401 2 2148074254
> 2006-01-20 15:43:21 NAIMUC35 127.0.0.1 GET
> /jakarta/isapi_redirector2.dll -
> 80 - 127.0.0.1 401 1 0
> 2006-01-20 15:43:21 NAIMUC35 127.0.0.1 GET
> /jakarta/isapi_redirector2.dll -
> 80 NAIMUC35\Administrator 127.0.0.1 200 0 0
> 2006-01-20 15:43:58 NAIMUC35 192.168.0.136 GET
> /jakarta/isapi_redirector2.dll - 80 - 192.168.0.1 401 2 2148074254
> 2006-01-20 15:43:58 NAIMUC35 192.168.0.136 GET
> /jakarta/isapi_redirector2.dll - 80 - 192.168.0.1 401 1 0
> 2006-01-20 15:43:58 NAIMUC35 192.168.0.136 GET
> /jakarta/isapi_redirector2.dll - 80 NAIMUC35\MiaZwoa 192.168.0.1 200 0 0
>
|
|
|
|
|