Re: IIS 6 from a Samba share
From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 09/21/05
- Next message: Khoa Le: "Can I rename a IIS6 Web server?"
- Previous message: Denis Mazourick: "ASP 0177:800401F3 error on COM object instance creation"
- In reply to: Coen: "Re: IIS 6 from a Samba share"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 21 Sep 2005 03:32:33 -0700
Win32 error is 1326.
NET HELPMSG 1326 returns:
Logon failure: unknown user name or bad password.
It looks like you either configured IIS to use an invalid user credential to
access the UNC share, or your UNC share is not configured to give access to
whatever user account you configured IIS to impersonate.
You will need to look through the previous URL I gave you to determine
exactly what you are doing -- if you are using pass-thru authentication or
not -- and configure appropriately based on understanding of security
implications.
I realize this look like new complexities relative to Apache/Linux, but
please understand that these are actual real security concepts that are not
present on Linux/Apache. The concepts mostly work magically given
Windows-based domains and member servers, but that's not where you are
starting from so you'll need to learn a bit more about how they interact and
work, etc.
-- //David IIS http://blogs.msdn.com/David.Wang This posting is provided "AS IS" with no warranties, and confers no rights. // "Coen" <Coen@discussions.microsoft.com> wrote in message news:A2964213-F454-4E07-83DF-55E956A7FBA0@microsoft.com... These are the only error messages I can find in IIS 2005-09-20 10:16:42 W3SVC87257621 **IP removed** GET / - 80 - 217.115.203.44 Mozilla/5.0+(Windows;+U;+Windows+NT+5.1;+en-US;+rv:1.7.10)+Gecko/20050716+Fi refox/1.0.6 500 16 1326 2005-09-20 10:16:42 W3SVC87257621 **IP removed** GET /favicon.ico - 80 - 217.115.203.44 Mozilla/5.0+(Windows;+U;+Windows+NT+5.1;+en-US;+rv:1.7.10)+Gecko/20050716+Fi refox/1.0.6 500 16 1326 2005-09-20 10:16:42 W3SVC87257621 **IP removed** GET /favicon.ico - 80 - 217.115.203.44 Mozilla/5.0+(Windows;+U;+Windows+NT+5.1;+en-US;+rv:1.7.10)+Gecko/20050716+Fi refox/1.0.6 500 16 1326 2005-09-20 10:20:21 W3SVC87257621 **IP removed** GET / - 80 - 217.115.203.44 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322) 500 16 1326 "David Wang [Msft]" wrote: > Your error message is just the standard "friendly error message" that is not > useful for debugging. > > Can you either configure IE to not show "friendly HTTP error messages" or > lo500ok up the logfile for the website for the correspond ing entry (should > be in %systemroot%\System32\LogFiles\W3SVC#\*.log). > > Diagnosing IIS issues is best done through its various log files and event > log entries because it is a security risk to disclose errors to the browser > client -- so using the browser to debug is intentionally not useful. > > You may want to browse my blog entries to get a basic understanding of IIS, > in particular how IIS authenticates and determines the user identity used to > execute requests -- because they are directly involved with this situation. > > If samba is all set up correctly, IIS should treat it like any other UNC > share on a Windows machine and just automatically work. See the following > URL on how to set it up correctly: > http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/webapp/iis/remstorg.mspx > > > -- > //David > IIS > http://blogs.msdn.com/David.Wang > This posting is provided "AS IS" with no warranties, and confers no rights. > // > "Coen" <Coen@discussions.microsoft.com> wrote in message > news:D083AD7D-F3D9-4657-AA0C-E733FBFEBE48@microsoft.com... > Thank you for your fast reply! > > I can log on from that IIS machine to the samba server using the account > info. Can make mappings, delete and add files, just like a regular share. > Problem starts when I use the UNC in IIS. It just refuses to work... no > error > messages are given, nothing in IIS logs, nothing in samba logs, nothing in > the event viewer, just the 500 I get in my browser. > > The page cannot be displayed > There is a problem with the page you are looking for, and it cannot be > displayed. > > Please try the following: > > * Contact the Web site administrator to inform them that this error has > occured for this URL address. > > HTTP Error 500 - Internal server error. > Internet Information Services (IIS) > > Technical Information (for support personnel) > > * Go to Microsoft Product Support Services and perform a title search > for the words HTTP and 500. > * Open IIS Help, which is accessible in IIS Manager (inetmgr), and > search for topics titled Web Site Administration, and About Custom Error > Messages. > * In the IIS Software Development Kit (SDK) or at the MSDN Online > Library, search for topics titled Debugging ASP Scripts, Debugging > Components, and Debugging ISAPI Extensions and Filters. > > > "David Wang [Msft]" wrote: > > > You want to report the exact 500 error entry in the web log for the > > website -- in particular the Win32 error code. > > > > You also need to look at the issue from an SMB perspective. IIS is not > doing > > anything special. > > > > Have you verified from the Windows machine that you can access the SMB > using > > a specified username/password. > > > > If so, you should be able to have IIS login as that username/password to > > access the SMB share (this is an option as soon as you select the UNC > share > > as directory root). If you want Pass-thru authentication to work, you may > > need to configure more users on the SAMBA end. > > > > In short, there's nothing "special" that IIS is using nor expecting. It is > > all standard NT stuff when it comes to UNC. > > > > -- > > //David > > IIS > > http://blogs.msdn.com/David.Wang > > This posting is provided "AS IS" with no warranties, and confers no > rights. > > // > > "Coen" <Coen@discussions.microsoft.com> wrote in message > > news:A8A748BC-C734-4714-9EFA-A5AF8010D20F@microsoft.com... > > Hello, > > > > I am working at a company who until recently only did Linux based > > webhosting. Due to increasing demand we decided to start using W2K3 to > serve > > ASP websites. > > > > Problem now is that I want to use the existing infrastructure with W2K3. > > There is a very large linux cluster which is already functioning as NAS > for > > Apache servers and I'd like IIS to connect to that. So I installed Samba > and > > created a user to connect to it and a share and I could browse the > directory > > without problems. It just goes wrong when I install the remote dir in IIS. > > Whatever I do, it always pops up with an error 500. Passwords are correct, > I > > know it's not all that, it just seems that IIS is expecting a different > kind > > of authentication too? > > > > Please help? > > > > > > > > >
- Next message: Khoa Le: "Can I rename a IIS6 Web server?"
- Previous message: Denis Mazourick: "ASP 0177:800401F3 error on COM object instance creation"
- In reply to: Coen: "Re: IIS 6 from a Samba share"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
