Re: Authentication Problem - Help

From: Ash (aliasgerj@hotmail.com)
Date: 07/08/02


From: "Ash" <aliasgerj@hotmail.com>
Date: Mon, 8 Jul 2002 15:46:04 -0500


Tried to scan through the machine.config file....

<authentication mode="Windows">

            <!--
            forms Attributes:
              name="[cookie name]" - Name of the cookie used for Forms
Authentication
              loginUrl="[url]" - Url to redirect client to for
Authentication
              protection="[All|None|Encryption|Validation]" - Protection
mode for data in cookie
              timeout="[seconds]" - Duration of time for cookie to be valid
(reset on each request)
              path="/" - Sets the path for the cookie
            -->
            <forms name=".ASPXAUTH" loginUrl="login.aspx" protection="All"
timeout="30" path="/">

                <!--
                credentials Attributes:
                  passwordFormat="[Clear|SHA1|MD5]" - format of user
password value stored in <user>
                -->
                <credentials passwordFormat="SHA1">
                        <!-- <user name="UserName" password="password"/> -->
                </credentials>

            </forms>

            <!--
            passport Attributes:
               redirectUrl=["url"] - Specifies the page to redirect to, if
the page requires authentication, and the user has

not signed on with passport
            -->
            <passport redirectUrl="internal"/>

        </authentication>

        <!--
        identity Attributes:
          impersonate="[true|false]" - Impersonate Windows User
            userName="Windows user account to impersonate" | empty string
implies impersonate the LOGON user specified by IIS

            password="password of above specified account" | empty string
        -->

        <authorization>

Part of process model looks like this

processModel Attributes:
          enable="[true|false]" - Enable processModel
          timeout="[Infinite | HH:MM:SS] - Total life of process, once
expired process is shutdown and a new process is

created
          idleTimeout="[Infinite | HH:MM:SS]" - Total idle life of process,
once expired process is automatically shutdown
          shutdownTimeout="[Infinite | HH:MM:SS]" - Time process is given to
shutdown gracefully before being killed
          requestLimit="[Infinite | number]" - Total number of requests to
serve before process is shutdown
          requestQueueLimit="[Infinite | number]" - Number of queued
requests allowed before process is shutdown
          restartQueueLimit="[Infinite | number]" - Number of requests kept
in queue while process is restarting
          memoryLimit="[number]" - Represents percentage of physical memory
process is allowed to use before process is

recycled
          webGarden="[true|false]" - Determines whether a process should be
affinitized with a particular CPU
          cpuMask="[bit mask]" - Controls number of available CPUs available
for ASP.NET processes (webGarden must be set to

true)
          userName="[user]" - Windows user to run the process as.
                      Special users: "SYSTEM": run as localsystem (high
privilege admin) account.
                                     "machine": run as low privilege user
account named "ASPNET".
                      Other users: If domain is not specified, current
machine name is assumed to be the domain name.
          password="[AutoGenerate | password]" - Password of windows user.
For special users (SYSTEM and machine), specify

"AutoGenerate".
          logLevel="[All|None|Errors]" - Event types logged to the event log
          clientConnectedCheck="[HH:MM:SS]" - Time a request is left in the
queue before ASP.NET does a client connected

check

comAuthenticationLevel="[Default|None|Connect|Call|Pkt|PktIntegrity|PktPriva
cy]" - Level of authentication for DCOM

security

comImpersonationLevel="[Default|Anonymous|Identify|Impersonate|Delegate]" -
Authentication level for COM security
          responseDeadlockInterval="[Infinite | HH:MM:SS]" - For deadlock
detection, timeout for responses when there are

executing requests.
          responseRestartDeadlockInterval="[Infinite | HH:MM:SS]" - Time to
wait between restarting WPs due to

responseDeadlockInterval
          maxWorkerThreads="[number]" - Maximum number of worker threads per
CPU in the thread pool
          maxIoThreads="[number]" - Maximum number of IO threads per CPU in
the thread pool
          serverErrorMessageFile="[filename]" - Customization for "Server
Unavailable" message

          When ASP.NET is running under IIS 6 in native mode, the IIS 6
process model is
          used and settings in this section are ignored. Please use the IIS
administrative
          UI to configure things like process identity and cycling for the
IIS
          worker process for the desired application
        -->
        <processModel enable="true" timeout="Infinite"
idleTimeout="Infinite" shutdownTimeout="0:00:05"

requestLimit="Infinite" requestQueueLimit="5000" restartQueueLimit="10"
memoryLimit="60" webGarden="false"

cpuMask="0xffffffff" userName="machine" password="AutoGenerate"
logLevel="Errors" clientConnectedCheck="0:00:05"

comAuthenticationLevel="Connect" comImpersonationLevel="Impersonate"
responseRestartDeadlockInterval="00:09:00"

responseDeadlockInterval="00:03:00" maxWorkerThreads="25"
maxIoThreads="25"/>

        <webControls clientScriptsLocation="/aspnet_client/{0}/{1}/"/>

        <clientTarget>
            <add alias="ie5" userAgent="Mozilla/4.0 (compatible; MSIE 5.5;
Windows NT 4.0)"/>
            <add alias="ie4" userAgent="Mozilla/4.0 (compatible; MSIE 4.0;
Windows NT 4.0)"/>
            <add alias="uplevel" userAgent="Mozilla/4.0 (compatible; MSIE
4.0; Windows NT 4.0)"/>
            <add alias="downlevel" userAgent="Unknown"/>
        </clientTarget>

        <!-- For updates to this browser data visit cyScape, Inc. at
http://www.cyscape.com/browsercaps -->
        <browserCaps>
            <result type="System.Web.HttpBrowserCapabilities"/>
            <use var="HTTP_USER_AGENT"/>

Anything that could be causing the problem?

Thanks for your help guys

Ash
"TimmyG" <tim@pracctice.com> wrote in message
news:edojC1DJCHA.2564@tkmsftngp08...
> Is the website in question an asp.net app?
>
> If so you may need to check the web.conifg file and change the
> authentication and authorization sections as it may be the asp.net app
that
> is blocking access and not IIS.
>
> If it's not an asp.net app then it sounds like you don't have anonymous
> access enabled on IIS or the individual web site, although you have
> suggested that this is not the case.
>
> Good luck
> TimmyG.
>
> "asger" <aliasgerj@hotmail.com> wrote in message
> news:#rQWP0CJCHA.1876@tkmsftngp12...
> > Hi,
> >
> > I installed Visual Studio NET Professional edition in my machine and
since
> > then, whoever visits my website is asked for a username/password. I
tried
> to
> > check my IIS (5) and see if the security settings were okay, and it
seems
> to
> > be fine.
> >
> > Am i missing something out?
> >
> > Thanks,
> >
> > Asger
> >
> >
>
>



Relevant Pages

  • Re: Authentication Problem - Help
    ... I just had similar - and I strongly suspect it's NT security. ... > implies impersonate the LOGON user specified by IIS ... > expired process is shutdown and a new process is ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: IIS 6 security - anyone can explain this for me ?
    ... "IIS is always listening for requests and dispatching ... if you specify in the IIS metabase that users ... metabase for the authentication? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: IIS 6.0 NT Authorization problem, slow response
    ... they are part of an expected authentication handshake. ... not a problem with IIS but rather with something you did. ... errors are caused by your browser and not someone else? ... NT4 file security when client requests file. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Digest authentication repeated requests
    ... :I have an IIS 6.0 application that I am accessing from IE6. ... IIS for "Basic" authentication everything works OK. ... the IE6 popos up the passwor box a number of ... or more requests for authentication and at other times only 2-3 requests ...
    (microsoft.public.inetserver.iis.security)
  • Digest authentication repeated requests
    ... I have an IIS 6.0 application that I am accessing from IE6. ... "Digest" authentication, the IE6 popos up the passwor box a number of times. ... or more requests for authentication and at other times only 2-3 requests ...
    (microsoft.public.inetserver.iis.security)