Re: IIS 6 Integrated Authentication and IE 6 - security credentials seem to not get passed from browser to server

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 04/05/05

  • Next message: Alan lim: "Re: Anonymous access"
    Date: Tue, 5 Apr 2005 15:53:33 +0800
    
    

    Mmm..
    401.2 - Logon failed due to server configuration.
    what authentication method you using ?
    is the NT4 and XP pro machine located in the same subnet and browse using
    the same URL ?

    >>
    > If I reconfigure the web site so that it runns in an application pool
    > associated with the default Network Service identity then the request from
    > the Windows XP machine works ok and is logged as:

    what was the previous app pool identity ?

    -- 
    Regards,
    Bernard Cheah
    http://www.tryiis.com/
    http://support.microsoft.com/
    http://www.msmvps.com/bernard/
    "Andy Wright" <A@bc.com> wrote in message 
    news:uKExrnPOFHA.3960@TK2MSFTNGP12.phx.gbl...
    > Hi,
    >
    > I have an IIS 6 application on Windows 2003 SP1 configured to use 
    > integrated authentication. It runs in an application pool that is 
    > configured with a specific user name and password.
    >
    > If I connect to the web site using IE 6 hosted on a machine running NT 4 
    > everything works fine. When I request a page from the web site, the 
    > following request is logged:
    >
    > 2005-04-04 09:00:57 192.168.0.100 GET /test/test.htm - 80 
    > LOCH_NESS\pplustester1 192.168.0.5 
    > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+4.0) 200 0 0
    >
    > However, if I log on as the same user (LOCH_NESS\pplustester1) on a 
    > machine running IE 6 hosted on Winndows XP, the system prompts me for user 
    > name and password credentials. After supplying the correct credentials I 
    > eventually get an HTTP 401.1 error. The request is logged at the server 
    > as:
    >
    > 2005-04-04 07:59:28 192.168.0.100 GET /test/test.htm - 80 - 192.168.0.127 
    > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 401 
    > 2 2148074254
    >
    > It seems that the user name authentication credentials aren't being passed 
    > on to the web server correctly.
    >
    > If I reconfigure the web site so that it runns in an application pool 
    > associated with the default Network Service identity then the request from 
    > the Windows XP machine works ok and is logged as:
    >
    > 2005-04-04 09:29:17 192.168.0.100 GET /test/test.htm - 80 
    > LOCH_NESS\Administrator 192.168.0.127 
    > Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 304 
    > 0 0
    >
    > Does anyone know if there are any settings that need to be configured for 
    > IE6 when running on XP to fix it so that the credentials are passed on 
    > correctly - or is there something more subtle that I'm missing?
    >
    > Thanks,
    >
    > Andy Wright
    > 
    

  • Next message: Alan lim: "Re: Anonymous access"

    Relevant Pages

    • RE: Integrated Authentication Issues with ISA 2004
      ... I added an anonymous rule after the rule requiring authentication and this ... > from a web site, it will not pass your authentication to the ISA Server. ... > request can pass ISA Server. ...
      (microsoft.public.isa)
    • RE: OWSSVR.DLL 401 Unauthorized
      ... please set up one web site in your SPS Server, ... > authentication Use the code to request the resource to see whether your ...
      (microsoft.public.sharepoint.portalserver.development)
    • Re: [Full-disclosure] Attacking the local LAN via XSS
      ... Linksys WRT54g home router, ... No password validation for configuration settings. ... This request disables wireless security on the router, ... The combination of these two bugs means that any internet web site can ...
      (Full-Disclosure)
    • Re: [Full-disclosure] linksys WRT54g authentication bypass
      ... Unfortunately, I do not have a vulnerable Linksys router to test this, ... No password validation for configuration settings. ... This request results in a user-id and password prompt: ... The combination of these two bugs means that any internet web site can ...
      (Full-Disclosure)
    • RE: username and password
      ... http://www.thenameofyoursite.com and a DNS server resolves the name to the ... more like a proxy server device that is attempting to forward your request to ... device's configuration. ... I have configured a Web site on server 2003 standard edition. ...
      (microsoft.public.inetserver.iis)