Re: Strange auth denial with IE Integrated Security and IIS; but not Firefox, Netscape

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 11/22/04 

Date: Mon, 22 Nov 2004 12:08:57 +0800

What I suspect is Kerberos auth failed, when the "Enable Windows Integrated
Authentication" is on. IE will force kerberos auth, without it, it will pick
NTLM if kerberos failed.

site question. what version of firefox and netscape you are using..
and basic auth is not enabled in the site property, right ? 

-- 
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"Kevin C" <kc@noneya.com> wrote in message
news:uuNvcxmzEHA.824@TK2MSFTNGP11.phx.gbl...
> I am having a rather weird error occur when trying to connect to my web
> applications.  Here is the scenario:
>     - There is a application pool that I have created to host my web apps
>     - The App pool is running under a domain account
>     - Anonymous access is off and WindowsAuth is on
>     - turned off any identity impersonation settings for the asp.net app;
> therefore it is using what is in the machine.config.  Which is <identity
> impersonate="false" userName="" password=""/>
>     - The domain account has sufficient privileges to ASP.NET Temp dir
>     - ACL set for proper accounts
>
> Here is the weird thing.  When I turn off the "Enable Windows Integrated
> Authentication" option in IE I get challenged and everything works fine
once
> I supply the correct creds - same things happens with Firefox and
Netscape.
> But, if I turn that option back on I get prompted and can't get through.
I
> have check the logs and all I see is the 401 challenge.   Does anyone have
> any ideas?  The only real difference I have done today is move this app
into
> running with the AppPool under a domain account.
>
> Kevin
>
>

Relevant Pages

  • Re: The pest of Impersonation
    ... Java web site that you are calling from the server that you are connecting ... If Kerberos auth is ... Negotiate authentication protocol option. ... with "impersonation" off, I only ever authenticate as the servername, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: The pest of Impersonation
    ... Java web site that you are calling from the server that you are connecting ... If you don't have access to that server, you won't be able to see its event ... If Kerberos auth is ... I checked the security event log of my web site and authentication to ...
    (microsoft.public.dotnet.framework.aspnet.security)