|
Home > Archive > IIS Server Security > March 2007 > Authentication issue
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Authentication issue
|
|
| Kim Oppalfens 2007-03-26, 1:35 am |
| Hi all,
I am running a website on a windows 2003 r2 server.
The website is configured to use integrated security.
If I try to access the website, I get an authentication box where I type in
the username and password, but the prompt keeps coming back.
If I put the website in the intranet zones and configure Internet explorer
to automatically send the credentials to pages in the intranet zone the
website is displayed succesfully.
Can anyone make some sense out of this, and point me in the right direction
to get this resolved?
--
"Everyone is an expert at something"
Kim Oppalfens - Sms Expert for lack of any other expertise
Windows Server System MVP - SMS
| |
| David Wang 2007-03-26, 1:35 am |
| On Mar 24, 1:28 pm, "Kim Oppalfens" <Kim Oppalfens [MVP]> wrote:
> Hi all,
>
> I am running a website on a windows 2003 r2 server.
> The website is configured to use integrated security.
>
> If I try to access the website, I get an authentication box where I type in
> the username and password, but the prompt keeps coming back.
> If I put the website in the intranet zones and configure Internet explorer
> to automatically send the credentials to pages in the intranet zone the
> website is displayed succesfully.
>
> Can anyone make some sense out of this, and point me in the right direction
> to get this resolved?
>
> --
> "Everyone is an expert at something"
> Kim Oppalfens - Sms Expert for lack of any other expertise
> Windows Server System MVP - SMS
If your website name is FQDN or has dots in it, IE will assume it
belongs to the Internet Zone (which does not auto-login) unless you
put it into Intranet Zone (which does auto-login).
Since you say that auto-login works, you need to check the IIS log
files for the exact reason why your manual login attempts fail or
repeatedly return.
//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//
| |
| Kim Oppalfens 2007-03-26, 7:31 pm |
| Is there a specific log file I should check?
--
"Everyone is an expert at something"
Kim Oppalfens - Sms Expert for lack of any other expertise
Windows Server System MVP - SMS
"David Wang" <w3.4you@gmail.com> wrote in message
news:1174861675.041864.111430@p77g2000hsh.googlegroups.com...
> On Mar 24, 1:28 pm, "Kim Oppalfens" <Kim Oppalfens [MVP]> wrote:
>
>
> If your website name is FQDN or has dots in it, IE will assume it
> belongs to the Internet Zone (which does not auto-login) unless you
> put it into Intranet Zone (which does auto-login).
>
> Since you say that auto-login works, you need to check the IIS log
> files for the exact reason why your manual login attempts fail or
> repeatedly return.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>
>
| |
| David Wang 2007-03-26, 7:31 pm |
| On Mar 26, 11:20 am, "Kim Oppalfens" <Kim Oppalfens [MVP]> wrote:
> Is there a specific log file I should check?
>
> --
> "Everyone is an expert at something"
> Kim Oppalfens - Sms Expert for lack of any other expertise
> Windows Server System MVP - SMS
>
> "David Wang" <w3.4...@gmail.com> wrote in message
>
> news:1174861675.041864.111430@p77g2000hsh.googlegroups.com...
>
>
>
>
>
>
>
>
>
>
>
> - Show quoted text -
IIS only produces one series of log files, grouped by date by default,
in %windir%\System32\LogFiles\W3SVC###\*.log
You will need to locate within the log file the 401.x entry by date/
time/request and report the sc-status, sc-substatus, and sc-win32error
data fields.
//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//
| |
| Ian Baldwin 2007-03-29, 7:18 am |
| Have you tried entering your domain name before the user name...
domain\username
It sometimes helps.
Ian
"Kim Oppalfens" wrote:
> Hi all,
>
> I am running a website on a windows 2003 r2 server.
> The website is configured to use integrated security.
>
> If I try to access the website, I get an authentication box where I type in
> the username and password, but the prompt keeps coming back.
> If I put the website in the intranet zones and configure Internet explorer
> to automatically send the credentials to pages in the intranet zone the
> website is displayed succesfully.
>
> Can anyone make some sense out of this, and point me in the right direction
> to get this resolved?
>
> --
> "Everyone is an expert at something"
> Kim Oppalfens - Sms Expert for lack of any other expertise
> Windows Server System MVP - SMS
>
>
|
|
|
|
|