Re: 401 Unauthorized trying to read SPList Attachment - owssrv.dll

From: Chris Kane (ChrisKane_at_discussions.microsoft.com)
Date: 04/26/05


Date: Tue, 26 Apr 2005 06:37:05 -0700

Okay, thanks. We store XML documents as SPListItem attachments that are to
be processed by our workflow application. We attempted to pass the
attachment's URI directly to the XPathDocument class constructor in
preparation for transforming it via XSL. This is where we originally
received the 401 from IIS. I can see how we could retrieve the attachemnt
using the HTTPWebResponse object and then pass this into the XPathDocument
class as a stream. Is this the best way to do this?

Thanks for your help!

"David Wang [Msft]" wrote:

> IIS does not see your impersonated user because you failed to authenticate
> as that user.
>
> Remember that we are talking about HTTP, which has its own publicly defined
> authentication protocols. Client-side impersonation isn't one of them. The
> identity of the user on the client, impersonated or not, means ABSOLUTELY
> NOTHING on the server unless you negotiate HTTP authentication of some sort.
>
> IE, for example, does this authentication behind the scenes without you
> noticing. So do many of the Windows programs and protocols. This isn't how
> the web and HTTP works, though, and you just have to follow the rules.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Chris Kane" <ChrisKane@discussions.microsoft.com> wrote in message
> news:3DA9A3DB-FD45-436E-99B5-265B002F81B3@microsoft.com...
> We have written a class that enumerates the items in a WSS list and then
> attemptes to open the attachment for each item. We have written two
> classes,
> one to impersonate a user and read in the list information and the other to
> be called by the first which actually opens the attachment. Our code fails
> when it tries to open the attachment in the second class with a 401 -
> Unauthorized error from IIS on http://localhost/_vti_bin/owssrv.dll. What's
> strange is that I can use IE to open the URL to the attachemnt without any
> problems. I noticed in the IIS logs that when I open the URL, I can see the
> domain\password passed to IIS from IE. However, when our code tries to
> access the same URL, no user information is passed, causing the 401. We
> have
> impersonated a valid user in our code, so why does IIS not see it?
>
> Thanks!
>
>
>



Relevant Pages

  • Re: 401 Unauthorized trying to read SPList Attachment - owssrv.dll
    ... > received the 401 from IIS. ... I can see how we could retrieve the attachemnt ... >> one to impersonate a user and read in the list information and the other to ... >> be called by the first which actually opens the attachment. ...
    (microsoft.public.inetserver.iis.security)
  • Re: 401 Unauthorized trying to read SPList Attachment - owssrv.dll
    ... Client-side impersonation isn't one of them. ... NOTHING on the server unless you negotiate HTTP authentication of some sort. ... be called by the first which actually opens the attachment. ... Unauthorized error from IIS on http://localhost/_vti_bin/owssrv.dll. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Opening a Word Doc in IE 6
    ... title bar flashes or the Word program becomes unresponsive when Word is ... > When I open a word document from an attachemnt in IE6, ... > program) opens, but before the socument opens, either the frame and ...
    (microsoft.public.word.docmanagement)
  • installing
    ... I have one user to where everytime they open an attachemnt, ... little window that says it's gathering information and starts asking for the ... when the user hits the 4 or 5 buttons for canceling, the attachment opens ...
    (microsoft.public.outlook.general)
  • Installing files
    ... I have one user to where everytime they open an attachemnt, ... little window that says it's gathering information and starts asking for the ... when the user hits the 4 or 5 buttons for canceling, the attachment opens ...
    (microsoft.public.outlook.installation)