Re: [IIS 6] A summary of my strange situation

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 09/14/03


Date: Sun, 14 Sep 2003 21:57:56 +1000


When you say "it doesn't work", what exactly is the problem?

Cheers
Ken

"Massimo" <barone@mclink.it> wrote in message
news:uTD$zXreDHA.3528@tk2msftngp13.phx.gbl...
: Here's a summary of the troubles I'm experiencing, of which I've been
talked
: in a previous thread. Now I'm posting again explaining all about my
: security-related configuration, so maybe someone can help me out of this.
: Here's the full story. I wanted to have my websites on another drive than
: the main one, so I first installed IIS and then Microsoft Exchange (I need
: OWA on my domain's main website), then I created a "web sites" dir on my
D:
: (data) drive, configured permission (hopefully in the right way, but see
: later) and then I created a "www.mydoman.com" subdir inside it, where I
: moved all of the contents of the original wwwroot. I then renamed the
: Default Web Site (the one under which Exchange created its virtual
subdirs)
: to "www.mydomain.com", told it to respond only to requests with host
headers
: "www.mydomain.com" and point its home directory to "D:\web
: sites\www.mydomain.com". Then I created new subdirs for every website I'm
: hosting on this server (D:\web sites\www.anotherdomain.com"). In the IIS
: configuration, I configured each website's home directory to be the proper
: one. Then, for some DB-access related reasons, for each website I
configured
: the account under which IIS's anonymous connections operate to be an AD
user
: I created only for this purpose (which I gave access to the DB I'm using).
: Now, everything works fine (eight websites), except I'm having some
: authentication troubles on this server when I use Windows integrated
: authentication for some webpages. When I enable it, on the main site, for
: example, the website works only if I access it with URL http://www, and
not
: if I access it with http://www.mydomain.com. The same is true for every
: other website or subdirectory I try to enable Windows authentication on
: (http://test but *not* http://test.mydomain.com). Standard authentication
: works fine everytime.
: Everyone of these websites is configured to accept requests both for its
: short name and its FQDN, of course.
: Can it be a NTFS permission-related problem ? I gave full control to
: administrators, web developers and SYSTEM, and I gave read permissions to
: the IIS service accounts I'm using for websites (except for some of them
: which actually *write* in their directory... I gave full control to their
: service accounts); but I saw the standard permissions for wwwroot include
: many more things... which of them are actually required for IIS to operate
?
: I tried the same with another webserver I'm running, where I didn't change
: anything about security from the default configuration, and everything
works
: fine there using Windows authentication, both with http://servername and
: http://servername.mydomain.com; so I think the problem should be related
to
: the changes I made...
:
: Please help me on this if you can, thanks.
:
: Massimo
:



Relevant Pages

  • Re: Windows Authentication
    ... Windows authentication doesn't work over the Internet. ... > The website was built using Commerce Server 2000. ... > permissions, IWAM has read permissions. ...
    (microsoft.public.inetserver.iis.security)
  • Re: deploying website VS 2005
    ... Thank you for explanation but I'm trying to run my website and get error: ... Server Error in '/' Application. ... An error occurred during the processing of a configuration file ... you must uninstall the WAP add-on first! ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Visual Studio 2005 Web Site <-> Visual Source Safe Problems...
    ... Part of the security on our website requires that the URL be correct. ... The other things I'd not expect to hear in a pro setup were "opening up SourceSafe" and "going into IIS manager and setting the root directory". ... You also didn't make clear the exact folder structure of the IIS servers that reside on your multiple client machines and the configuration thereof? ...
    (microsoft.public.vsnet.general)
  • Re: Livna Usability Assessment (Was: Re: cursed nvidia fedora my lack of knowledgeness)
    ... > The website really isn't the point here. ... give you the information needed to accomplish much. ... "How to enable the Livna repository on your system". ... that's Configuration, but we're both too technical to understand others ...
    (Fedora)
  • [IIS 6] A summary of my strange situation
    ... security-related configuration, so maybe someone can help me out of this. ... OWA on my domain's main website), then I created a "web sites" dir on my D: ... other website or subdirectory I try to enable Windows authentication on ... administrators, web developers and SYSTEM, and I gave read permissions to ...
    (microsoft.public.inetserver.iis.security)

Loading