Re: IE prompts for username, Mozilla does not!

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 10/28/04

  • Next message: S RAMESH: "How to move the Inetpub folder into different drive"
    Date: Thu, 28 Oct 2004 03:02:45 -0700
    
    

    Setting up anonymous access in IIS simply means that IIS will attempt to
    login the specified Anonymous User in IIS configuration to execute all
    requests -- IIS will not negotiate authentication with the browser to obtain
    the user context to execute the given request. In other words, view
    authentication as using the browsing user's name/password, while anonymous
    authentication is IIS using a hardcoded but configurable username/password.

    Now, it could be possible that the specified Anonymous User in IIS
    configuration is incorrect (i.e. the username/password is inconsistent with
    the real username/password in the local SAM or AD), in which case when IIS
    attempts to logon the Anonymous User for anonymous requests, it fails and
    thus returns a 401.1 -- which will then cause the web browser to pop up the
    login dialog. Realize that IIS is not negotiating authentication with the
    browser -- it is simply returning a 401.1 because the anonymous credentials
    are wrong -- so when the user gives username/password to the login dialog,
    it is totally ignored by IIS, which then retries anonymous authentication,
    still with incorrect username/password, returns 401.1 again... and the cycle
    continues until the client gives up.

    All this are simply server side configuration issues. I've honestly not had
    an IIS server configured with anonymous authentication enabled require login
    regardless of the browsers I've used -- so there is something funny with
    your server configuration/setup.

    Can you give the web log entries for those requests that trigger the login
    dialog box. Make sure the browser caches are all cleared, and navigate to
    two different web pages and show the web log entries for them all, along
    with Authentication protocols enabled for the URLs in question and any
    custom ISAPI/products on the server.

    You can also try running AuthDiag to see what it detects.

    http://www.microsoft.com/downloads/details.aspx?FamilyId=E90FE777-4A21-4066-BD22-B931F7572E9A&displaylang=en

    -- 
    //David
    IIS
    This posting is provided "AS IS" with no warranties, and confers no rights.
    //
    "Mark" <anonymous@devdex.com> wrote in message
    news:%23Pt7FLMvEHA.1564@TK2MSFTNGP09.phx.gbl...
    Hi David - thank you.
    So this is just a situation I have to put up with?  I still can't
    understand though, as the site is setup to allow anonymous access - so
    surely the webserver is not prompting IE for anything?  Every page the
    user visits they are prompted for a username and password - this can't
    be right.
    I did read another post:
    http://groups.google.com/groups?hl=en&lr=&threadm=OHMCfGdrDHA.3180%40TK2
    MSFTNGP11.phx.gbl&rnum=3&prev=/groups%3Fhl%3Den%26q%3Diis%2Bie%2Banonymo
    us%2Blogin%2Bprompt%2Bfor%2Busername%26spell%3D1 - which suggested that
    IIS and the Windows SAM DB is out of sync...
    Sorry if I seem a little confused - but I'm really struggling here,
    Thanks, Mark
    *** Sent via Developersdex http://www.developersdex.com ***
    Don't just participate in USENET...get rewarded for it!
    

  • Next message: S RAMESH: "How to move the Inetpub folder into different drive"

    Relevant Pages

    • Re: DCOM calls fails - access denied
      ... That's exactly how I understood the ASP.NET security. ... But why does one configuration work but not the other? ... should get the token from IIS. ... If you set there a domain account, ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: WCF webservice over SSL and without
      ... encryption/signature is handled by SOAP instead of HTTP (IIS) and should be ... I'm assuming there's some point of endpoint configuration I need to do. ... Are you going to use SSL over Http(the most common and convenient ... Microsoft MSDN Online Support Lead ...
      (microsoft.public.dotnet.framework.webservices)
    • Re: Remote Web Workplace logon problem
      ... After you restore metabase from another computer, it will copy all IIS ... configuration information from that ... You can also try reinstall monitoring component by following these steps. ... Select Windows Small Business Server 2003 and then click Change/Remove. ...
      (microsoft.public.windows.server.sbs)
    • Re: web access failed - argghh
      ... Right click the site itself and click Backup Configuration, ... Right click the IIS root in the mmc and click Restore Configuration. ... not the default web site as you might assume. ...
      (microsoft.public.dotnet.framework.aspnet)
    • RE: More than One
      ... As for ASP.NET 2.0 web application hosting in IIS website, ... single virtual directory which is configured as "Application"(have ... each application's runtime configuration collection are ... we suggest deploy separate applications (haven't particular ...
      (microsoft.public.dotnet.framework.aspnet)