Re: Virtual Directory to a remote UNC not working properly

David,

Thanks for the reply. What you wrote below is exactly what i am trying to
do... ie Make files from the NAS file server available to users on the inside
on the (Intranet) and from the outside on the (Internet) via our web server
in general... These files are linked through pages on the web site.

It appears my security is not setup correctly?

--
Dave


"David Wang" wrote:

Can you describe what you are trying to do so that we can help you with
correct configuration? It sounds like you have a web server and a NAS
file server in your Intranet, and you are trying to make the files on
the NAS file server available via the web server, to people both inside
your Intranet and on the Internet.

The behaviors you describe are actually all normal and by-design.

When trying to access a file on the virtual directory from outside the
domain or on the domain I get the following message "You are not authorized
to view this page...
This is because of "double hop" using NTLM with a UNC Virtual
Directory. Lots of people hit this, and there are well documented ways
to make this scenario work. Please search for those solutions.


If I access a file on the UNC from within the domain without using the
virtual dir I have no problems. If I access a file on the UNC from outside
the domain I get the message "Cannot find 'file://\\flnas01... rest of path'
make sure the path or internet address is correct.
This is because the name "flnas01" is not known to the computer/browser
outside the domain.

If you got that error by clicking on a link on a web page, it means
your web page content is incorrect because it has a UNC file reference
(which is valid only on the Intranet OR if you expose the flnas01
server to the entire world outside your domain). If you want the web
page to work outside the domain, you will have to find a suitable way
to expose your flnas01 server outside the domain, which may not be what
you want.



//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//




dhoops wrote:
Setup:
IIS 6.0, Windows 2003 sp1 server.
Web server and UNC server are on the same domain.
Using 'Integrated Windows and Digest Authentication on both the Intranet
site and the virtual directory on the web server.

Problem:
When trying to access a file on the virtual directory from outside the
domain or on the domain I get the following message "You are not authorized
to view this page...
You do not have permission to view this directory or page due to the access
control list (ACL) that is configured for this resource on the web server.
HTTP error 401.3 - Unauthorized: Access is denied due to an ACL set on the
requested resource (IIS).

If I access a file on the UNC from within the domain without using the
virtual dir I have no problems. If I access a file on the UNC from outside
the domain I get the message "Cannot find 'file://\\flnas01... rest of path'
make sure the path or internet address is correct.

Any direction or insight would be appreciated!
--
Dave


.

Relevant Pages

  • Re: write with cURL
    ... execute permissions. ... This is assuming that the PHP script runs ... of potential security risks from other users on the same server. ... web server itself is part of the group. ...
    (alt.php)
  • Re: Webservice running very slowly
    ... Is the Web server used in an Intranet only environment or is the Web ... The webservice connects to an access database. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: web service architecture question
    ... To assume that we have all the security we will ever need is a bad one. ... ways to breach a server, and the separatin of the web and app server is one ... You can use remoting or web services. ... The web server will be exposed outside the ...
    (microsoft.public.dotnet.framework.webservices)
  • RE: System.Data.SqlClient "Timeout expired" causing ASP.net web applic
    ... There are many values here that can shutdown the aspnet_wp. ... > update tables on a Web Server running SQL Server 2000. ... > formation(DataSet currentBalances): Timeout expired. ...
    (microsoft.public.dotnet.languages.vb)
  • RE: System.Data.SqlClient "Timeout expired" causing ASP.net web applic
    ... There are many values here that can shutdown the aspnet_wp. ... > update tables on a Web Server running SQL Server 2000. ... > formation(DataSet currentBalances): Timeout expired. ...
    (microsoft.public.dotnet.framework.aspnet)
Quantcast