Re: IIS Not using anonymous impersonation

From: Paul Clement (UseAdddressAtEndofMessage_at_swspectrum.com)
Date: 01/04/05


Date: Tue, 04 Jan 2005 10:44:31 -0600

On Tue, 4 Jan 2005 09:10:45 -0000, "MattC" <m@m.com> wrote:

¤ Hi,
¤
¤ I havea web app that has anonymous accesss enabled. I have specified that
¤ IIS should have the credentials of a user in the active directory. This
¤ user has rights to my SQL Server database.
¤
¤ In my web.config file I have impersonate=true set.
¤
¤ However when I try to access my website an error is produced. On checking my
¤ error log it shows that it failed due to the fact that the user trying to
¤ acccess the database has no rights. Instead of using the user specified in
¤ IIS it seems IIS is using the domain and username of the client, not what I
¤ want.
¤
¤ How do I get IIS to use the user specified in the Directory Security tab of
¤ the web app's properties in IIS?
¤
¤ I have anonymous access ticked and Integrated authentication ticked (without
¤ the second no access at all is allowed).

I think what's happening is that Integrated authentication is being used because Anonymous
authentication is being denied access to a resource. You need to set up NTFS file permissions
correctly for the Anonymous account that you are attempting to impersonate.

The fact that you're being denied access when using Anonymous access exclusively would indicate that
the Anonymous account does not have sufficient permissions to access the web application resources.

Paul ~~~ pclement@ameritech.net
Microsoft MVP (Visual Basic)



Relevant Pages

  • sharepoint authentication
    ... i needed integrated authentication in SPS 2003 to allow users to be ... All of the users were allready assigned security permisions (most of ... Turn on integrated authentication in IIS ... Put Miller intranet into the local intranet zone on clients ...
    (microsoft.public.sharepoint.portalserver)
  • sharepoint authentication
    ... i needed integrated authentication in SPS 2003 to allow users to be ... All of the users were allready assigned security permisions (most of ... Turn on integrated authentication in IIS ... Put Miller intranet into the local intranet zone on clients ...
    (microsoft.public.sharepoint.portalserver)
  • sharepoint authentication
    ... i needed integrated authentication in SPS 2003 to allow users to be ... All of the users were allready assigned security permisions (most of ... Turn on integrated authentication in IIS ... Put Miller intranet into the local intranet zone on clients ...
    (microsoft.public.sharepoint.portalserver)
  • integrated authentication- access problem
    ... i needed integrated authentication in SPS 2003 to allow users to be ... All of the users were allready assigned security permisions (most of ... Turn on integrated authentication in IIS ... Put Miller intranet into the local intranet zone on clients ...
    (microsoft.public.sharepoint.portalserver)
  • IIS and authentication method (integrated slow over internet)
    ... We have a pretty major Sharepoint Team Services intranet site. ... over the internet when integrated authentication is switched on. ... seems to query IIS, which says "yes integrated is available" and then ...
    (microsoft.public.inetserver.iis.security)

Quantcast