Re: IIS 6 Anonymous / SUS always 401.3

From: JoesCat (JoesCat_at_discussions.microsoft.com)
Date: 05/29/05

  • Next message: Joe: "Possible DoS Not Sure?" 
    Date: Sun, 29 May 2005 06:22:02 -0700

    Thanks, I'll check all that, the Filemon utility is one I didn't think about,
    that's a great suggestion.
    I set up file auditing on the server, but didn't pick up a thing.

    SUS ran fine on this box for months - I uninstalled / freshly install IIS
    and SUS. It always working fine with default settings that way - anonymous
    website configuration and all that.
    I certainly is a supported configuration, a pretty plain W2003 Server box,
    NT domain member (NOT a DC, which is just never a good candidate for a web
    server).

    I've poured through all the ACL's on the files, even cranking up perms to
    allow everyone read and execute, etc. IIS is using the IUSR account, and
    I've verified after a fresh restart, and one attemtp, that the IUSR account
    has successful logons. 

    -- 
-Joe
"David Wang [Msft]" wrote:
> 401.3 when you ONLY have anonymous authentication enabled suggests that IIS
> successfully logged in as the configured anonymous user account (whatever it
> is). However, this user identity lacks access to the requested resource.
> 
> 1. I would check the IIS configuration to determine the EXACT user identity
> used as the anonymous user account. IIS defaults to IUSR_machinename, but
> applications can define and use their own identity.
> 2. Then, I would look at the filesystem ACLs on /autoupdate/getmanifest.asp
> and make sure that the identity in #1 has read access to the file. You can
> also check using FileMon from www.sysinternals.com to see what user identity
> IIS is using to fail to read this file
> 3. Finally, I would look at objects inside of the ASP page and make sure the
> identity in #1 can instantiate them.
> 
> 
> The request to  /clientwebservice/SusServerVersion.xml   return 404 with
> Win32 error 3, ERROR_FILE_NOT_FOUND. So, it looks like the client is looking
> for files that are not on your server. I have no idea what
> /clientwebservice/SusServerVersion.xml does nor whether this is normal.
> 
> Have you verified that SUS is supported in your particular server
> configuration (is this domain/stand-alone server, Domain controller?) , and
> is SUS supposed to support anonymous access and if so, is there special
> configuration you need to make?
> 
> -- 
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
  • Next message: Joe: "Possible DoS Not Sure?"

    Relevant Pages

    • Re: Remote Web Workplace logon problem
      ... After you restore metabase from another computer, it will copy all IIS ... configuration information from that ... You can also try reinstall monitoring component by following these steps. ... Select Windows Small Business Server 2003 and then click Change/Remove. ...
      (microsoft.public.windows.server.sbs)
    • Re: Server a disaster .. need to manually save mailboxes
      ... MS Exchange IMAP4 ... MetaBase Agent has determined that IIS is running in IIS 5 Isolation ... Exchange server requires that IIS 6 is using Worker Process ... configuration from IIS 5 Isolation mode to Worker Process Isolation ...
      (microsoft.public.windows.server.sbs)
    • Re: ADFS
      ... as the redirect to the federation server will end ... IIS configuration for the resource application, but it sounds like the trust ... Also remember that your app must use https, not http, so make sure you have ...
      (microsoft.public.windows.server.active_directory)
    • Re: Configuration error ?
      ... If you specify to use Front Page in the WebAccess Method: portion of the ... > I have a web APS application that works fine at home, with IIS. ... > Server Error in '/' Application. ... An error occurred during the processing of a configuration ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • RE: CEICW FAILURE PROBLEMS
      ... Open CEICW from the "Server Management" To Do List" ... 6.)On the services Configuration" window I select all services and click next ... Install MBExplorer by installing IIS 6 Resource Kit Tools: ...
      (microsoft.public.windows.server.sbs)