Re: Service principal name (SPN) / Active Directory Problem

Hi ,

403 is not an authentication error. We should gather IIS log files to
determine the exact 403 error code(with subcode). This will help you
address the actual problem. Below are all 403.x codes we defined in IIS:

403 - Forbidden. IIS defines a number of different 403 errors that indicate
a more specific cause of the error:?403.1 - Execute access forbidden.
403.2 - Read access forbidden.
403.3 - Write access forbidden.
403.4 - SSL required.
403.5 - SSL 128 required.
403.6 - IP address rejected.
403.7 - Client certificate required.
403.8 - Site access denied.
403.9 - Too many users.
403.10 - Invalid configuration.
403.11 - Password change.
403.12 - Mapper denied access.
403.13 - Client certificate revoked.
403.14 - Directory listing denied.
403.15 - Client Access Licenses exceeded.
403.16 - Client certificate is untrusted or invalid.
403.17 - Client certificate has expired or is not yet valid.
403.18 - Cannot execute requested URL in the current application pool. This
error code is specific to IIS 6.0.
403.19 - Cannot execute CGIs for the client in this application pool. This
error code is specific to IIS 6.0.
403.20 - Passport logon failed. This error code is specific to IIS 6.0.

Please collect the recent log files in \System32\LogFiles\W3SVC[n]\
directory (n here is the Site ID which can be viewed in the right panel by
clicking Web Sites folder in IIS) and paste the records with 403 error
here. Thanks.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.



.

Relevant Pages

  • Re: RDS/ADO on IIS 6.0
    ... Look for the 404 substatus 2 errors in the web log files and add Web Service ... Internet Server Error: Object/module not found. ... > Web Service Extensions to enable those ISAPI DLLs to execute. ... > rogue binary onto your server, they can't execute it because IIS wouldn't ...
    (microsoft.public.inetserver.iis)
  • Re: IIS 6.0 cannot download a Verisign CRL !!
    ... Does the IIS server have outbound permission through its proxy? ... > using Verisign client certificates for a .NET application. ... > The revocation function was unable to check revocation because the ... > Your client certificate was revoked, or the revocation status could not ...
    (microsoft.public.security)
  • RE: Set client certificate is IIS
    ... Install Client Certificate on IIS Server for ServerXMLHTTP ... |>This example uses a serialized certficate store because ...
    (microsoft.public.inetserver.iis.security)
  • RE: HTTPS Send Port + Client Certificate Authentication
    ... errors defined in IIS are: ... - Client certificate required. ... This error code is specific to IIS 6.0. ... If the web server is IIS6 on Win2K3, you can collect the web site's ...
    (microsoft.public.biztalk.general)
  • Programming a certificate handshake for IIS in VB.NET and ASP.NET
    ... running WebMethods and our site running IIS. ... When we set an IIS ... setting to "Ignore client certificate" or "Accept Client ...
    (microsoft.public.inetserver.iis.security)
Quantcast