Re: Anonymous access

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 04/06/05

  • Next message: Ken: "RE: AD user name changed, IIS still sees old user name" 
    Date: Wed, 6 Apr 2005 12:10:17 +1000

    OK, I'm looking at the log file. I see the following requests

    **** 2005-04-05 01:08:07 192.168.2.1 GET /index.htm - 80 ALPHASOFT\alan
    192.168.2.28 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 200 0 64

    2005-04-05 01:08:07 192.168.2.1 GET /Background.jpg - 80 -
    192.168.2.28 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 401 2
     2148074254

    2005-04-05 01:08:07 192.168.2.1 GET /Background.jpg - 80 -
    192.168.2.28 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 401 1 0

    ***** 2005-04-05 01:08:07 192.168.2.1 GET /Background.jpg - 80
    ALPHASOFT\alan 192.168.2.28
    Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 200 0 64

    the requests with the **** are successful requests (200 OK status). Where
    are the requests from the clients which are not successful?

    Cheers
    Ken 

    -- 
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Alan lim" <finding.alan@gmail.com> wrote in message 
news:a429228e.0504051706.2c94dd22@posting.google.com...
: "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message 
news:<e1WvcddOFHA.1176@TK2MSFTNGP12.phx.gbl>...
: > I meant: Is there a proxy server between the clients and the server? 
NTLM
: > authentication doesn't work through most proxy servers. You can test 
this by
: > disabling IWA, and enabling Basic. if everything starts working, then 
there
: > is probably a proxy server between the server and clients.
: >
: > Cheers
: > Ken
: >
: > -- 
: > Blog: www.adopenstatic.com/cs/blogs/ken/
: > Web: www.adopenstatic.com
: >
: >
: > "Alan lim" <finding.alan@gmail.com> wrote in message
: > news:a429228e.0504050234.7059307d@posting.google.com...
: > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: > news:<eqaphGZOFHA.1732@TK2MSFTNGP14.phx.gbl>...
: > : > Thanks for posting the log.
: > : >
: > : > Can you answer the second question please?
: > : >
: > : > Cheers
: > : > Ken
: > : >
: > : > -- 
: > : > Blog: www.adopenstatic.com/cs/blogs/ken/
: > : > Web: www.adopenstatic.com
: > : >
: > : >
: > : > "Alan lim" <finding.alan@gmail.com> wrote in message
: > : > news:a429228e.0504041833.2a89abd0@posting.google.com...
: > : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
: > : > news:<uK#x8aROFHA.3380@TK2MSFTNGP15.phx.gbl>...
: > : > : > -- 
: > : > : > Blog: www.adopenstatic.com/cs/blogs/ken/
: > : > : > Web: www.adopenstatic.com
: > : > : > "Alan lim" <finding.alan@gmail.com> wrote in message
: > : > : > news:a429228e.0504040019.7c6c85e@posting.google.com...
: > : > : > : "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in 
message
: > : > : > news:<uy0vKIMOFHA.1476@TK2MSFTNGP09.phx.gbl>...
: > : > : > : > Computers that are not on the domain should still be able to
: > access
: > : > the
: > : > : > : > content. The user will need to provide credentials that are
: > : > acceptable
: > : > : > to
: > : > : > : > the webserver.
: > : > : > : >
: > : > : > : > Please post the exact log file entries from the IIS logfile 
for
: > the
: > : > : > requests
: > : > : > : > in question.
: > : > : > : >
: > : > : > : > Thanks
: > : > : > : >
: > : > : > : > Cheers
: > : > : > : > Ken
: > : > : > : >
: > : > : > : > -- 
: > : > : > : > Blog: www.adopenstatic.com/cs/blogs/ken/
: > : > : > : > Web: www.adopenstatic.com
: > : > : > : >
: > : > : > : >
: > : > : > : > "Alan lim" <finding.alan@gmail.com> wrote in message
: > : > : > : > news:a429228e.0504031736.2e64c87d@posting.google.com...
: > : > : > : > : Hi All,
: > : > : > : > :
: > : > : > : > : I have a server 2003 and running well with integrated IIS 
6. I
: > : > have a
: > : > : > : > : problem when anonymous user can go to IIS web page but 
cannot
: > : > access
: > : > : > : > : file. The error was HTTP and 404. I realise that this 
error
: > only
: > : > occur
: > : > : > : > : when the PC was not login to domain.
: > : > : > : > : Is there a way to allow those mobile users to access file 
from
: > IIS
: > : > 6?
: > : > : > : > :
: > : > : > : > : Thanks
: > : > : > : > : Alan
: > : > : > :
: > : > : > : Hi Ken,
: > : > : > : Thanks for your replied. For those computers are not on the 
domain
: > : > : > : when connected to web page, it will prompt user and password 
box.
: > : > : > : After key in a correct information, it will go to web page. 
When
: > you
: > : > : > : access any file at hyperlink, it will show you http and 404. I
: > believe
: > : > : > : it should got to do with security. Why there is no user and
: > password
: > : > : > : box pop-up when click on hyperlink? In the log file, it shows
: > 401.1
: > : > : > : and 401.2.
: > : > : >
: > : > : > Hi,
: > : > : >
: > : > : > Clients should not be seeing 404 - they should be seeing 401 (or
: > maybe
: > : > 403)
: > : > : >
: > : > : > 401.1 - access denied due to ACL (NTFS permissions) on the 
resource
: > in
: > : > : > question
: > : > : > 401.2 - access denied due to server configuration
: > : > : >
: > : > : > So, my questions are:
: > : > : > a) can you please post the log files entries in question? I 
asked
: > this
: > : > : > before
: > : > : > b) what authentication mechanism are you using? Basic? 
Integrated
: > : > Windows
: > : > : > Authentication? If you are using IWA, is there a proxy server
: > between
: > : > where
: > : > : > the users are and where the server is?
: > : > : >
: > : > : > Cheers
: > : > : > Ken
: > : > :
: > : > :
: > : > : Hi Ken,
: > : > :
: > : > : I am using Integrated Windows Authentication. The following is the 
log
: > : > : file.
: > : > :
: > : > : #Software: Microsoft Internet Information Services 6.0
: > : > : #Version: 1.0
: > : > : #Date: 2005-04-05 01:08:04
: > : > : #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
: > : > : cs-username c-ip cs(User-Agent) sc-status sc-substatus 
sc-win32-status
: > : > : 2005-04-05 01:08:04 192.168.2.1 GET / - 80 - 192.168.2.28
: > : > : Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 401 2 
2148074254
: > : > : 2005-04-05 01:08:04 192.168.2.1 GET / - 80 - 192.168.2.28
: > : > : Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 401 1 0
: > : > : 2005-04-05 01:08:04 192.168.2.1 GET / - 80 - 192.168.2.28
: > : > : Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 401 1 
2148074252
: > : > : 2005-04-05 01:08:07 192.168.2.1 GET / - 80 - 192.168.2.28
: > : > : Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 401 1 0
: > : > : 2005-04-05 01:08:07 192.168.2.1 GET /index.htm - 80 ALPHASOFT\alan
: > : > : 192.168.2.28 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 
200 0
: > : > : 64
: > : > : 2005-04-05 01:08:07 192.168.2.1 GET /Background.jpg - 80 -
: > : > : 192.168.2.28 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 
401 2
: > : > : 2148074254
: > : > : 2005-04-05 01:08:07 192.168.2.1 GET /Background.jpg - 80 -
: > : > : 192.168.2.28 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 
401 1
: > : > : 0
: > : > : 2005-04-05 01:08:07 192.168.2.1 GET /Background.jpg - 80
: > : > : ALPHASOFT\alan 192.168.2.28
: > : > : Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1) 200 0 64
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 2 2148074254
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 0
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 2148074252
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 2 2148074254
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 0
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 2148074252
: > : > : 2005-04-05 01:08:14 192.168.2.1 OPTIONS / - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 2 2148074254
: > : > : 2005-04-05 01:08:14 192.168.2.1 OPTIONS / - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 0
: > : > : 2005-04-05 01:08:14 192.168.2.1 OPTIONS / - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 2148074252
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 2 2148074254
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 0
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 2148074252
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 2 2148074254
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 0
: > : > : 2005-04-05 01:08:14 192.168.2.1 PROPFIND /html - 80 - 192.168.2.28
: > : > : Microsoft-WebDAV-MiniRedir/5.1.2600 401 1 2148074252
: > : > :
: > : > : In fact, I am working in a computer vendor company. Everyday I 
need to
: > : > : install certain programs on the new computer for my corporate 
client.
: > : > : I found that using web page is more efficient because of the
: > : > : hyperlink. I had mentioned earily that my office PCs have no 
problem
: > : > : accessing IIS because all are connected to domain.
: > : > : Only those new PCs belong to customer and not connected to domain 
have
: > : > : above problem.
: > : > :
: > : > : Thanks
: > : > : Alan
: > :
: > : : Hi Ken,
: > : > :
: > : > : I am using Integrated Windows Authentication
:
: Hi Ken,
:
: I do not have any proxy server because only one 2003 server in my
: office.
: I have follow your instruction to remove IWA and enable Basic
: Authentication. But still hit the problem. When I click any of the
: hyperlink, it will prompt "The Page cannot be displayed". I ready
: don't know what is going on. I appreciate what you have done. Thanks
:
: Regards,
: Alan
  • Next message: Ken: "RE: AD user name changed, IIS still sees old user name"

    Relevant Pages

    • RE: PTError: 0x80244017
      ... But, how could I explain that 65 clients, which are ... behind the same proxy server, ... been updated without troubles. ... Targeting Cookie: 0x80244017 ...
      (microsoft.public.windowsupdate)
    • Re: SBS 2000 + Linksys Modem/Router
      ... It is normal to point your browser to the proxy server. ... All of your clients have to go out through the proxy server (ISA) for security reasons. ... Keep in mind that you may need to port forward if the FTGate is not running on ...
      (microsoft.public.windows.server.sbs)
    • Re: HTTP tunneling and Servlet communication
      ... almost definitely be behind a firewall/using a proxy server. ... I have come up with a class which acts as a Facade to clients and presents a course simpler request/response API to clients. ... I have a Requset Factory which creates Asynch and Synch Requests. ... Can I send request/responses AND data on the same tunnel?. ...
      (comp.lang.java.programmer)
    • ISA issues accessing a sharepoint
      ... I am having issues with clients computers accessing a local sharepoint ... site due to an ISA error. ... If I uncheck the Bypasss proxy server for local addresses box, ...
      (microsoft.public.isa)
    • Re: Surf and Spyware Protection on OpenBSD
      ... Identify what websites, mail servers, etc your clients need to ... The easiest answer to that problem is a local proxy server than can ... websites, then you'll achieve a much more secure LAN (though of course, ...
      (comp.unix.bsd.openbsd.misc)