Re: Integrated Windows Authentication with ADSI
From: Jeff Curren (JeffCurren@private.hotmail.com)
Date: 09/15/02
- Next message: Baki: "IIS in DMZ, SQL Server and Exchange on internal network?"
- Previous message: Jeff Curren: "Re: IIS 4.0 Security - .htm processed by asp.dll"
- In reply to: Jennifer: "Integrated Windows Authentication with ADSI"
- Next in thread: Stefan Schachner[MS]: "RE: Integrated Windows Authentication with ADSI"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Jeff Curren" <JeffCurren@private.hotmail.com> Date: Sun, 15 Sep 2002 10:00:58 -0400
The reason it works when you connect as anonymous or use basic auth might be
because you have granted admin permissions to IUSR_[machinename]?
Regardless, you should probably bind to the active directory using explicit
authentication credentials. That way you don't have to grant what might be
excessive permissions to web users just to get the ADS functions to work.
Jeff
"Jennifer" <jennifer@yahoo.com> wrote in message
news:12ca101c25b51$31078450$3bef2ecf@TKMSFTNGXA10...
> I have a web site that I would like to use Integrated
> Windows Authentication (IWA) to authenticate users.
>
> The users I am trying to authenticate are Active Directory
> users. The web server with IIS on it is a member of the
> domain in which the Active directory users were created.
>
> When I set up IWA, I can get into the web site but when
> the ASP code does ADSI calls that does stuff to the Active
> Directory users it fails. For example, the code:
>
> set objUser = objDomain.Create("user", theUserName)
> objUser.setPassword thePAssword
> ....
> objUser.SetInfo
>
> Fails on "objUser.SetInfo" The error is gives is:
>
> "Active Directory (0x80070005) General access denied error"
>
> However, I don't think there is anything wrong with the
> permissions of the user I'm using because the same user
> works fine if I use Anonymous Access or Basic
> Authentication. The same code does NOT generate an error
> with those access methods.
>
> I would like to use IWA because of security but I can't
> figure out why IWA does not work when the same user works
> with Basic Authentication or Anonymous Access.
>
> Thank you,
> Jennifer
>
- Next message: Baki: "IIS in DMZ, SQL Server and Exchange on internal network?"
- Previous message: Jeff Curren: "Re: IIS 4.0 Security - .htm processed by asp.dll"
- In reply to: Jennifer: "Integrated Windows Authentication with ADSI"
- Next in thread: Stefan Schachner[MS]: "RE: Integrated Windows Authentication with ADSI"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
