Re: Authentication Problem - Help
From: Adrian Berry (email@adrianberry.com)
Date: 07/09/02
- Next message: Per Schjetne: "Separate Login site"
- Previous message: Nico Ecke: "Re: Getting Windows-Username from IE???"
- In reply to: Ash: "Re: Authentication Problem - Help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: email@adrianberry.com (Adrian Berry) Date: 9 Jul 2002 01:14:20 -0700
I just had similar - and I strongly suspect it's NT security.
Make sure aspnet can access all your files - in my case it was a js
file in aspnet_client that didn't have the appropriate permissions
best bet is to take a single page and look at all the resources it
requires which involve a new request check each of these individually
to make sure it's got the correct permissions (read & execute/list
folder contents/read)
hope this helps - and good luck
"Ash" <aliasgerj@hotmail.com> wrote in message news:<edYsYerJCHA.2692@tkmsftngp10>...
> Tried to scan through the machine.config file....
>
> <authentication mode="Windows">
>
> <!--
> forms Attributes:
> name="[cookie name]" - Name of the cookie used for Forms
> Authentication
> loginUrl="[url]" - Url to redirect client to for
> Authentication
> protection="[All|None|Encryption|Validation]" - Protection
> mode for data in cookie
> timeout="[seconds]" - Duration of time for cookie to be valid
> (reset on each request)
> path="/" - Sets the path for the cookie
> -->
> <forms name=".ASPXAUTH" loginUrl="login.aspx" protection="All"
> timeout="30" path="/">
>
> <!--
> credentials Attributes:
> passwordFormat="[Clear|SHA1|MD5]" - format of user
> password value stored in <user>
> -->
> <credentials passwordFormat="SHA1">
> <!-- <user name="UserName" password="password"/> -->
> </credentials>
>
> </forms>
>
> <!--
> passport Attributes:
> redirectUrl=["url"] - Specifies the page to redirect to, if
> the page requires authentication, and the user has
>
> not signed on with passport
> -->
> <passport redirectUrl="internal"/>
>
> </authentication>
>
> <!--
> identity Attributes:
> impersonate="[true|false]" - Impersonate Windows User
> userName="Windows user account to impersonate" | empty string
> implies impersonate the LOGON user specified by IIS
>
>
> password="password of above specified account" | empty string
> -->
>
>
> <authorization>
>
> Part of process model looks like this
>
> processModel Attributes:
> enable="[true|false]" - Enable processModel
> timeout="[Infinite | HH:MM:SS] - Total life of process, once
> expired process is shutdown and a new process is
>
> created
> idleTimeout="[Infinite | HH:MM:SS]" - Total idle life of process,
> once expired process is automatically shutdown
> shutdownTimeout="[Infinite | HH:MM:SS]" - Time process is given to
> shutdown gracefully before being killed
> requestLimit="[Infinite | number]" - Total number of requests to
> serve before process is shutdown
> requestQueueLimit="[Infinite | number]" - Number of queued
> requests allowed before process is shutdown
> restartQueueLimit="[Infinite | number]" - Number of requests kept
> in queue while process is restarting
> memoryLimit="[number]" - Represents percentage of physical memory
> process is allowed to use before process is
>
> recycled
> webGarden="[true|false]" - Determines whether a process should be
> affinitized with a particular CPU
> cpuMask="[bit mask]" - Controls number of available CPUs available
> for ASP.NET processes (webGarden must be set to
>
> true)
> userName="[user]" - Windows user to run the process as.
> Special users: "SYSTEM": run as localsystem (high
> privilege admin) account.
> "machine": run as low privilege user
> account named "ASPNET".
> Other users: If domain is not specified, current
> machine name is assumed to be the domain name.
> password="[AutoGenerate | password]" - Password of windows user.
> For special users (SYSTEM and machine), specify
>
> "AutoGenerate".
> logLevel="[All|None|Errors]" - Event types logged to the event log
> clientConnectedCheck="[HH:MM:SS]" - Time a request is left in the
> queue before ASP.NET does a client connected
>
> check
>
> comAuthenticationLevel="[Default|None|Connect|Call|Pkt|PktIntegrity|PktPriva
> cy]" - Level of authentication for DCOM
>
> security
>
> comImpersonationLevel="[Default|Anonymous|Identify|Impersonate|Delegate]" -
> Authentication level for COM security
> responseDeadlockInterval="[Infinite | HH:MM:SS]" - For deadlock
> detection, timeout for responses when there are
>
> executing requests.
> responseRestartDeadlockInterval="[Infinite | HH:MM:SS]" - Time to
> wait between restarting WPs due to
>
> responseDeadlockInterval
> maxWorkerThreads="[number]" - Maximum number of worker threads per
> CPU in the thread pool
> maxIoThreads="[number]" - Maximum number of IO threads per CPU in
> the thread pool
> serverErrorMessageFile="[filename]" - Customization for "Server
> Unavailable" message
>
> When ASP.NET is running under IIS 6 in native mode, the IIS 6
> process model is
> used and settings in this section are ignored. Please use the IIS
> administrative
> UI to configure things like process identity and cycling for the
> IIS
> worker process for the desired application
> -->
> <processModel enable="true" timeout="Infinite"
> idleTimeout="Infinite" shutdownTimeout="0:00:05"
>
> requestLimit="Infinite" requestQueueLimit="5000" restartQueueLimit="10"
> memoryLimit="60" webGarden="false"
>
> cpuMask="0xffffffff" userName="machine" password="AutoGenerate"
> logLevel="Errors" clientConnectedCheck="0:00:05"
>
> comAuthenticationLevel="Connect" comImpersonationLevel="Impersonate"
> responseRestartDeadlockInterval="00:09:00"
>
> responseDeadlockInterval="00:03:00" maxWorkerThreads="25"
> maxIoThreads="25"/>
>
> <webControls clientScriptsLocation="/aspnet_client/{0}/{1}/"/>
>
> <clientTarget>
> <add alias="ie5" userAgent="Mozilla/4.0 (compatible; MSIE 5.5;
> Windows NT 4.0)"/>
> <add alias="ie4" userAgent="Mozilla/4.0 (compatible; MSIE 4.0;
> Windows NT 4.0)"/>
> <add alias="uplevel" userAgent="Mozilla/4.0 (compatible; MSIE
> 4.0; Windows NT 4.0)"/>
> <add alias="downlevel" userAgent="Unknown"/>
> </clientTarget>
>
> <!-- For updates to this browser data visit cyScape, Inc. at
> http://www.cyscape.com/browsercaps -->
> <browserCaps>
> <result type="System.Web.HttpBrowserCapabilities"/>
> <use var="HTTP_USER_AGENT"/>
>
> Anything that could be causing the problem?
>
> Thanks for your help guys
>
> Ash
> "TimmyG" <tim@pracctice.com> wrote in message
> news:edojC1DJCHA.2564@tkmsftngp08...
> > Is the website in question an asp.net app?
> >
> > If so you may need to check the web.conifg file and change the
> > authentication and authorization sections as it may be the asp.net app
> that
> > is blocking access and not IIS.
> >
> > If it's not an asp.net app then it sounds like you don't have anonymous
> > access enabled on IIS or the individual web site, although you have
> > suggested that this is not the case.
> >
> > Good luck
> > TimmyG.
> >
> > "asger" <aliasgerj@hotmail.com> wrote in message
> > news:#rQWP0CJCHA.1876@tkmsftngp12...
> > > Hi,
> > >
> > > I installed Visual Studio NET Professional edition in my machine and
> since
> > > then, whoever visits my website is asked for a username/password. I
> tried
> to
> > > check my IIS (5) and see if the security settings were okay, and it
> seems
> to
> > > be fine.
> > >
> > > Am i missing something out?
> > >
> > > Thanks,
> > >
> > > Asger
> > >
> > >
> >
> >
- Next message: Per Schjetne: "Separate Login site"
- Previous message: Nico Ecke: "Re: Getting Windows-Username from IE???"
- In reply to: Ash: "Re: Authentication Problem - Help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|