Re: Authentication Problem - Help

From: Adrian Berry (email@adrianberry.com)
Date: 07/09/02


From: email@adrianberry.com (Adrian Berry)
Date: 9 Jul 2002 01:14:20 -0700


I just had similar - and I strongly suspect it's NT security.

Make sure aspnet can access all your files - in my case it was a js
file in aspnet_client that didn't have the appropriate permissions

best bet is to take a single page and look at all the resources it
requires which involve a new request check each of these individually
to make sure it's got the correct permissions (read & execute/list
folder contents/read)

hope this helps - and good luck

"Ash" <aliasgerj@hotmail.com> wrote in message news:<edYsYerJCHA.2692@tkmsftngp10>...
> Tried to scan through the machine.config file....
>
> <authentication mode="Windows">
>
> <!--
> forms Attributes:
> name="[cookie name]" - Name of the cookie used for Forms
> Authentication
> loginUrl="[url]" - Url to redirect client to for
> Authentication
> protection="[All|None|Encryption|Validation]" - Protection
> mode for data in cookie
> timeout="[seconds]" - Duration of time for cookie to be valid
> (reset on each request)
> path="/" - Sets the path for the cookie
> -->
> <forms name=".ASPXAUTH" loginUrl="login.aspx" protection="All"
> timeout="30" path="/">
>
> <!--
> credentials Attributes:
> passwordFormat="[Clear|SHA1|MD5]" - format of user
> password value stored in <user>
> -->
> <credentials passwordFormat="SHA1">
> <!-- <user name="UserName" password="password"/> -->
> </credentials>
>
> </forms>
>
> <!--
> passport Attributes:
> redirectUrl=["url"] - Specifies the page to redirect to, if
> the page requires authentication, and the user has
>
> not signed on with passport
> -->
> <passport redirectUrl="internal"/>
>
> </authentication>
>
> <!--
> identity Attributes:
> impersonate="[true|false]" - Impersonate Windows User
> userName="Windows user account to impersonate" | empty string
> implies impersonate the LOGON user specified by IIS
>
>
> password="password of above specified account" | empty string
> -->
>
>
> <authorization>
>
> Part of process model looks like this
>
> processModel Attributes:
> enable="[true|false]" - Enable processModel
> timeout="[Infinite | HH:MM:SS] - Total life of process, once
> expired process is shutdown and a new process is
>
> created
> idleTimeout="[Infinite | HH:MM:SS]" - Total idle life of process,
> once expired process is automatically shutdown
> shutdownTimeout="[Infinite | HH:MM:SS]" - Time process is given to
> shutdown gracefully before being killed
> requestLimit="[Infinite | number]" - Total number of requests to
> serve before process is shutdown
> requestQueueLimit="[Infinite | number]" - Number of queued
> requests allowed before process is shutdown
> restartQueueLimit="[Infinite | number]" - Number of requests kept
> in queue while process is restarting
> memoryLimit="[number]" - Represents percentage of physical memory
> process is allowed to use before process is
>
> recycled
> webGarden="[true|false]" - Determines whether a process should be
> affinitized with a particular CPU
> cpuMask="[bit mask]" - Controls number of available CPUs available
> for ASP.NET processes (webGarden must be set to
>
> true)
> userName="[user]" - Windows user to run the process as.
> Special users: "SYSTEM": run as localsystem (high
> privilege admin) account.
> "machine": run as low privilege user
> account named "ASPNET".
> Other users: If domain is not specified, current
> machine name is assumed to be the domain name.
> password="[AutoGenerate | password]" - Password of windows user.
> For special users (SYSTEM and machine), specify
>
> "AutoGenerate".
> logLevel="[All|None|Errors]" - Event types logged to the event log
> clientConnectedCheck="[HH:MM:SS]" - Time a request is left in the
> queue before ASP.NET does a client connected
>
> check
>
> comAuthenticationLevel="[Default|None|Connect|Call|Pkt|PktIntegrity|PktPriva
> cy]" - Level of authentication for DCOM
>
> security
>
> comImpersonationLevel="[Default|Anonymous|Identify|Impersonate|Delegate]" -
> Authentication level for COM security
> responseDeadlockInterval="[Infinite | HH:MM:SS]" - For deadlock
> detection, timeout for responses when there are
>
> executing requests.
> responseRestartDeadlockInterval="[Infinite | HH:MM:SS]" - Time to
> wait between restarting WPs due to
>
> responseDeadlockInterval
> maxWorkerThreads="[number]" - Maximum number of worker threads per
> CPU in the thread pool
> maxIoThreads="[number]" - Maximum number of IO threads per CPU in
> the thread pool
> serverErrorMessageFile="[filename]" - Customization for "Server
> Unavailable" message
>
> When ASP.NET is running under IIS 6 in native mode, the IIS 6
> process model is
> used and settings in this section are ignored. Please use the IIS
> administrative
> UI to configure things like process identity and cycling for the
> IIS
> worker process for the desired application
> -->
> <processModel enable="true" timeout="Infinite"
> idleTimeout="Infinite" shutdownTimeout="0:00:05"
>
> requestLimit="Infinite" requestQueueLimit="5000" restartQueueLimit="10"
> memoryLimit="60" webGarden="false"
>
> cpuMask="0xffffffff" userName="machine" password="AutoGenerate"
> logLevel="Errors" clientConnectedCheck="0:00:05"
>
> comAuthenticationLevel="Connect" comImpersonationLevel="Impersonate"
> responseRestartDeadlockInterval="00:09:00"
>
> responseDeadlockInterval="00:03:00" maxWorkerThreads="25"
> maxIoThreads="25"/>
>
> <webControls clientScriptsLocation="/aspnet_client/{0}/{1}/"/>
>
> <clientTarget>
> <add alias="ie5" userAgent="Mozilla/4.0 (compatible; MSIE 5.5;
> Windows NT 4.0)"/>
> <add alias="ie4" userAgent="Mozilla/4.0 (compatible; MSIE 4.0;
> Windows NT 4.0)"/>
> <add alias="uplevel" userAgent="Mozilla/4.0 (compatible; MSIE
> 4.0; Windows NT 4.0)"/>
> <add alias="downlevel" userAgent="Unknown"/>
> </clientTarget>
>
> <!-- For updates to this browser data visit cyScape, Inc. at
> http://www.cyscape.com/browsercaps -->
> <browserCaps>
> <result type="System.Web.HttpBrowserCapabilities"/>
> <use var="HTTP_USER_AGENT"/>
>
> Anything that could be causing the problem?
>
> Thanks for your help guys
>
> Ash
> "TimmyG" <tim@pracctice.com> wrote in message
> news:edojC1DJCHA.2564@tkmsftngp08...
> > Is the website in question an asp.net app?
> >
> > If so you may need to check the web.conifg file and change the
> > authentication and authorization sections as it may be the asp.net app
> that
> > is blocking access and not IIS.
> >
> > If it's not an asp.net app then it sounds like you don't have anonymous
> > access enabled on IIS or the individual web site, although you have
> > suggested that this is not the case.
> >
> > Good luck
> > TimmyG.
> >
> > "asger" <aliasgerj@hotmail.com> wrote in message
> > news:#rQWP0CJCHA.1876@tkmsftngp12...
> > > Hi,
> > >
> > > I installed Visual Studio NET Professional edition in my machine and
> since
> > > then, whoever visits my website is asked for a username/password. I
> tried
> to
> > > check my IIS (5) and see if the security settings were okay, and it
> seems
> to
> > > be fine.
> > >
> > > Am i missing something out?
> > >
> > > Thanks,
> > >
> > > Asger
> > >
> > >
> >
> >



Relevant Pages

  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Cannot Default Domain?
    ... API is not using the server's domain in its operations. ... > of the authentication protocol you use and is outside of IIS control. ... IIS calls security API calls which understand the blob and does its ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS file system writes across domains
    ... the process should be running under the context of the IIS ... Have the remote server turn on file auditing and check the security event ... > Integrated Windows Authentication which in my opinion means that the ...
    (microsoft.public.inetserver.iis.security)
  • Re: can someone explain this weird behaviour?
    ... IIS to also authenticate with another protocol before even allowing ... authentication scheme seems confusing, and I agree -- and that is why ... The "Dir Security" property you change is one of the ... But for the same asp.net application with the same login control etc.. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Authentication Problem - Help
    ... implies impersonate the LOGON user specified by IIS ... expired process is shutdown and a new process is ... requests allowed before process is shutdown ... cy]" - Level of authentication for DCOM ...
    (microsoft.public.dotnet.framework.aspnet.security)