Re: IIS Basic Auth logon failure

From: Andres (not@disclosed.com)
Date: 11/08/02 

From: "Andres" <not@disclosed.com>
Date: Fri, 8 Nov 2002 06:32:24 -0800

Thanks for your reply.
We are using NT 4.0; the page is configured through IIS to
have our domain as the default domain for Basic
Authentication; by the log entry, I can tell that the
server is using the correct domain name when trying to
authenticate the users. Again, this works with all except
2 users.
Any info would be greatly appreciate it.
Thanks,
Andres

>-----Original Message-----
>Are they logging on with the domain name:
>
>UserName: Domain\UserName
>Password: Password
>
>?
>
>(on Win2k, there is an extra box for the Domain, whereas
on WinXP there is
>only a username and password fields, and you need to
enter the domain as
>part of the username, or use a UPN: user@domain)
>
>Cheers
>Ken
>
>--
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>"Andres" <not@disclosed.com> wrote in message
>news:9ef501c28671$0e2753c0$3aef2ecf@TKMSFTNGXA09...
>> Hello!
>> In an Intranet, I have a directory setup to use NT
>> Authentication, except for one ASP file in it that is
>> setup to use Basic Authentication. The idea is that
when
>> users access this page, they must enter their network
>> credentials to re-confirm who they are.
>> This works fine for 99% of the users, but there are 2-3
>> users that cannot get authenticated by the server to
>> access this page. They enter their network ID and
>> password like everyone else, but they get prompted again
>> and again until their account gets locked out
completely.
>> They ARE able to access all other pages in this
directory
>> that are setup with NT authentication. In the event log
>> these entries get recorded:
>>
>> Security Log:
>> Logon Failure:
>> Reason: Unknown user name or bad password
>> User Name: username
>> Domain: mydomain
>> Logon Type: 2
>> Logon Process: IIS
>> Authentication Package:
>> MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
>> Workstation Name: THE_IIS_SERVER_NAME
>>
>>
>> System Log:
>> The server was unable to logon the Windows NT
>> account 'username' due to the following error: Logon
>> failure: unknown user name or bad password. The data is
>> the error code.
>>
>> Obviously, these users accounts are OK and the users
know
>> their passwords, as they login to the network every day.
>> It seems the IIS server is not looking for the
information
>> in the right place?? This happens a lot, too when the
>> users change their password, and they cannot access this
>> page for a couple of days, but then it works. However,
>> there are 2 users now that cannot access it and it has
>> been more than 2 weeks since they've been trying.
>>
>> Any help would be greatly appreciated!!
>>
>> Thanks,
>> Andres
>>
>
>
>.
>

Relevant Pages

  • Re: Integrated Authentication - one way cross forest trust
    ... You must set the permissions in IIS and on the folder you are ... > and is in the trusted domain) we are unable to get past the authentication ... this would lead me to believe it is specific to IIS. ... > Logon Failure: ...
    (microsoft.public.inetserver.iis)
  • IIS auth. problem with 2003 SP1
    ... as such IIS sees user sessions as anonymous. ... allows for administration of the web interface, and because of that I've set ... it to require integrated authentication. ... For each logon attempt the following message is written to the audit log: ...
    (microsoft.public.inetserver.iis.security)
  • Re: What is a local logon?
    ... and a hash of your password to IIS. ... > impression that Basic Authentication is now a network, not a local, logon. ...
    (microsoft.public.windows.server.security)
  • Re: ADAM
    ... If you need logon auditing, then ADAM can do this, although it will go into ... Security log, not IIS log. ... >>You can not use ADAM for IIS authentication, ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to perform OWA-like authentication...?
    ... > If my assumptions are correct, a properly deployed external OWA site uses> the equivalent of IIS 'Basic' authentication over SSL. ... Username and> Password are transmitted in cleartext to the server, encrypted by the> overarching SSL cert. ...
    (microsoft.public.inetserver.iis.security)