modified machineKey permissions, now login.aspx fails



I am not a programmer, but server admin. Was troubleshooting
slow ssl authentication using AD Membership Provider on a .NET v2.0.50727 site
that I support. Noticed web server sits for 14 seconds after the ssl handshake
before it talks to my domain controller. Copied code to two other web servers
and could not duplicate the slowness issue, so I went back to looking at
configurations that I had changed over the last few months on the specific
server.

I recalled modifiying the machineKey permissions a long time ago, so
I was looking at that and noticed network service did not have
permissions so I added it. Did not take any permissions away.
Now the authenticated part of my web site fails. At first I got unable
to contact ldap server (which was up and functional). Then I recyled
the application pool and now I get Configuration Error. Server cannot
handle directory requests... and the web.config line highlighted is
<membership configProtectionProvider="DataProtectionConfigurationProvider">

I did not touch anything in web.config. Authentication worked (although very
slow)before I touched the machineKeys. What can I do? Do I re encrypt with
aspnet_regiis?? My sql connections work fine, only AD authentication broke.

Thanks

.



Relevant Pages

  • Re: Kerberos machine authentication - apparent authentication fail
    ... > until logon), the wireless connection can kick off when it is ready. ... > was confirmed in the server event logs with IAS (i set that up as the radius ... > as an ordinary user kicks in and takes over from the machine authentication. ... > while the network sorts itself out and a double click on a network link of ...
    (microsoft.public.windows.server.security)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... SYSTEM account. ... In IIS I took the virtual server that I was testing, ... Authentication premise. ... From a website perspective, I ...
    (microsoft.public.inetserver.iis.security)
  • Need help configuring Wireless Connection profile
    ... I have an SBS 2003 server and a Server 2003 member server set up using RADIUS ... Windows authentication for all users,4129,LRG\ryanv,4149,Wireless WPA2 PEAP ... Certificate Services ...
    (microsoft.public.windowsxp.general)
  • Re: Remote Web Workplace Issues-Please help!
    ... Open the Server Management Console, ... client after Authentication" right. ... permissions, and Microsoft Windows user rights according to the KB 812614. ... Download the IIS Resource Kit tools from the following page: ...
    (microsoft.public.windows.server.sbs)
  • [REVS] NTLM HTTP Authentication is Insecure By Design
    ... in front of a web server, and that proxy server shares a single TCP ... These are attacks that make use of non-RFC HTTP requests (HTTP Request ... the authentication is associated with the ...
    (Securiteam)