|
Home > Archive > IIS Server Security > March 2006 > IIS suddenly wants login?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS suddenly wants login?
|
|
| ajj3085@alum.rit.edu 2006-03-08, 5:56 pm |
| Hi all,
Have a wierd problem. I have IIS 6 on Win2k3 Standard, setup for
anonymous connections only. Its hosting a few web services and web
sites under the Default web site using Asp.Net 1.1 and 2.0.
The problem is that for some reason it will suddenly decide that it
wants you to login (both Firefox and IE). If you cancel, you are
denied access to the page.
Using the IIS Manager to Restart IIS fixes the problem... only to have
it resurface again some time later.
I believe I was getting this behaviour on IIS 5.1 (winXP) as well.
Any ideas what it might be??
Thanks
Andy
| |
| Ken Schaefer 2006-03-09, 2:49 am |
| When you allow anonymous access, IIS still needs to use a user account get
access to the files off the hard disk. So it impersonates a user account. By
default this is IUSR_<machinename> for static files and ASP files, and the
web app pool's identity (by default Network Service) for ASP.NET files.
If these accounts can't get access to the files, the user would be prompted
to supply alternate credentials.
So, I would start by enabling Object Access Auditing in the Local Security
Policy and audit access to the files (or use Filemon from
www.sysinternals.com) and see if either IUSR_<machinename> or the Network
Service account are being denied access to any of your website's files.
Cheers
Ken
<ajj3085@alum.rit.edu> wrote in message
news:1141844315.213037.117740@e56g2000cwe.googlegroups.com...
: Hi all,
:
: Have a wierd problem. I have IIS 6 on Win2k3 Standard, setup for
: anonymous connections only. Its hosting a few web services and web
: sites under the Default web site using Asp.Net 1.1 and 2.0.
:
: The problem is that for some reason it will suddenly decide that it
: wants you to login (both Firefox and IE). If you cancel, you are
: denied access to the page.
:
: Using the IIS Manager to Restart IIS fixes the problem... only to have
: it resurface again some time later.
:
: I believe I was getting this behaviour on IIS 5.1 (winXP) as well.
:
: Any ideas what it might be??
:
: Thanks
: Andy
:
| |
| ajj3085@alum.rit.edu 2006-03-13, 5:54 pm |
| Ken,
Thanks for the tips, but I've already checked those. Also, it doesn't
explain why it normally works, then suddenly (no file changes /
permission changes at all) IIS just starts prompting. As I said, a
simple iisreset removes the login prompts, so I doubt its a file
permissions issue.
Any other ideas?
Thanks
Andy
|
|
|
|
|