Re: Certsrv Page not authenticating with IE

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 10/26/05 

Date: Wed, 26 Oct 2005 13:12:21 +1000

Hi,

IWA = Integrated Windows Authentication (the AuthN mode that you enabled for
IIS)

The IIS logfiles are located (by default) in
c:\windows\system32\logfiles\w3svc1\

(replace c:\windows with c:\winnt if you're on NT/Win2k, and replace w3svc1
with the folder containing the website identifier of your site if you're not
using the default website to host the /certsrv folder)

Thanks

Cheers
Ken

"BCW" <nospam@cfl.rr.com> wrote in message
news:%23SGItad2FHA.896@TK2MSFTNGP09.phx.gbl...
: Forgive my ignorance, but what does IWA stand for? I did check the
: application log files in Event viewer on the server, but there were no IIS
: events.
:
: Brian
:
:
: Ken Schaefer wrote:
:
: > The first request should be anonymous, then you should be prompted for
: > credentials (or IE send them automagically, depending on your IE
: > settings).
: >
: > Can you post the corresponding IIS logfile entries for the requests in
: > question? (when you have IWA enabled?)
: >
: > Cheers
: > Ken
: >
: > "BCW" <nospam@cfl.rr.com> wrote in message
: > news:%23Hq63pb2FHA.2364@TK2MSFTNGP12.phx.gbl...
: > :I have an XP Pro client with a user logging on who is in the Domain
: > :Admins
: > : group. There is only one DC, server01 in tailspintoys.com. The DC is
: > also
: > : a certificate server and Exchange server for coursework. When I try
to
: > get
: > : a certificate at http://server01/certsrv my authentication fails using
: > : windows integrated authentication. If I enable anonymouse
: > : authentication
: > I
: > : can access the site, but the registration request will not complete.
I
: > : captured packets with ethereal and it shows that my userid is not
being
: > : sent with the request:
: > :
: > : Microsoft Windows Logon Protocol (Old)
: > : Command: SAM LOGON request from client (0x12)
: > : Request count: 0
: > : Unicode Computer Name: WINXP-2-7
: > : User Name:
: > : Mailslot Name: \MAILSLOT\NET\GETDC501
: > :
: > : The authentication is apparently failing at this point because there
is
: > : no
: > : User Name. The following message back from the server is:
: > :
: > : SAM Active Directory Response - user unknown
: > :
: > : which makes sense. How should I troubleshoot this?
: > :
:

Relevant Pages

  • Re: HTTP - basic authentication example.
    ... or *never* knowing the realm..) ... This is called authentication and is implemented ... requests a web page it sends a request to the server. ... consists of headers with certain information about the request. ...
    (comp.lang.python)
  • Re: Each HTTP object being requested twice (401 then 200 responses)
    ... Authentication" and the web.config authentication setting is ... Authorized because the request was made anonymously. ... requests the same object a second time it uses kerberos; ... Kerberos tokens should not be regenerated for every request. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Each HTTP object being requested twice (401 then 200 responses)
    ... Authentication" and the web.config authentication setting is ... Authorized because the request was made anonymously. ... requests the same object a second time it uses kerberos; ... Kerberos tokens should not be regenerated for every request. ...
    (microsoft.public.inetserver.iis.security)
  • Re: HTTP_AUTHORIZATION header
    ... HTML file from one virtual directory, and then immediately execute a CGI from ... Authentication happens when I request the HTML ... header is not expected for every request for NTLM ...
    (microsoft.public.inetserver.iis.security)
  • Re: HTTP_AUTHORIZATION header
    ... I use WFetch to make a Basic authenticated POST request against my CGI EXE ... Nitpick on your stated understanding of authentication protocols - ... header is not expected for every request for NTLM ...
    (microsoft.public.inetserver.iis.security)