Sporadic HTTP 401 Permission Denied Error
From: Mark Walker (markwalker42_at_hotmail.com)
Date: 05/13/03
- Next message: Phillip Higgins: "Registry access from ASP.NET"
- Previous message: Giovanni Bassi: "Re: SSL with forms authentication"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 12 May 2003 19:08:49 -0700
Just an update on where this ended up...
I opened a case with Microsoft (CASE # SRX030327604751)
which started with the IIS folks. I discovered that when a
client normally accesses a web site/service that requires
authentication there is an initial denial (401 error)
followed by a successful request. The credentials aren't
passed until the request initially fails. This was evident
when we looked at the logs where access denied and
successful request messages were always paired. This
pattern was consistent throughout the logs and there were
no anomalies that could be associated with the sporadic
401 messages getting through to the client. Given this I
was handed over to the .NET framework folks.
We did some stack traces and other information gathering
exercises with the end result being a recommendation to
implement our own component to handle the security (the
component name escapes me for the moment). In parallel to
all of this I was reconsidering using web services vs.
using the better performing .NET remoting capabilities. I
was also considering using WSE (Web Services Enhancements)
to improve the situation.
In the end I ended up avoiding using an authenticated web
service (at least using Integrated Windows Authentication)
for this application and went with the .NET remoting
approach.
So the short of it is that the problem is solved by
avoidance rather than understanding and implementation.
I hope this helps
>-----Original Message-----
>I have been experiencing a sporadic HTTP 401 Permission
>Denied messages using web services.
>
>I'm protecting web services using windows authentication
>and setting the role in the web.config file for the
>service.
>
>IIS is configured (on Windows 2000 Server) to disallow
>Anonymous users and only allow Windows Integrated
>authentication and basic authentication. And the web
>service is protected by the builtin\Adminstrators role
(in
>web.config file).
>
>I've also tried using a non-adminstrator role to protect
>this service with no improvement.
>
>Most of the time access works but occasionally I will get
>the 401 error.
>
>Could this be a client connection limit issue?
>.
>
- Next message: Phillip Higgins: "Registry access from ASP.NET"
- Previous message: Giovanni Bassi: "Re: SSL with forms authentication"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
