Re: 401.3 when logging in as user on the same system



Can you post the iis log for those error request?
if you have custom error pages, make sure you configure the correct model
(IIS or .NET),
then ensure the user has at least READ access to those pages.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Chris" <Chris@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BE1A99E3-0140-44ED-923C-3ADD8460536A@xxxxxxxxxxxxxxxx
Thanks for the reply.

The log is showing a user that is on the same server I tested with. This
user should not have access, and it does get denied, but it's showing the
wrong custom error page.

what I think it is, because the user account doesnt have access to the 404
page we designed via permissions. It has the IUSR_servername but as we're
trying to log in with an account that exists on the server already, the
permissions aren't the same as if the IUSR_servername is being used. Can
you
shed any light on this?

Thanks

Chris

"Bernard Cheah [MVP]" wrote:

401.3 is permission related. check the log file and see what user is
accessing the resource.

..net error msgs and IIS custom error msgs are different.
iis -
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/80cb8d8d-8fd8-4af5-bb3b-4d11fff3ab9c.mspx?mfr=true

..net - http://support.microsoft.com/kb/910434


--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


"Chris" <Chris@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F6EAB26F-5E17-40B5-8FF6-2D0D9D4A30F7@xxxxxxxxxxxxxxxx
Hi all.

I have a website. I have directory security (Directory Security from
the
website properties tab) for the whole site turned off for the IUSR
account,
so you need a windows login for access to this site.

Now, the user for the site that has modify permissions has full access
and
no issues. When you keep pressing OK / or cancel at the login for the
website
without putting a username in or you put a random one in you get the
correct
401.3 page that is setup for the website, and each page thereafter.

Now, if I use a username that is on the same system to try and login,
the
401.3 is NOT the page that I've setup in the custom errors. Instead I
get:

Server Error in '/' Application.
--------------------------------------------------------------------------------

Access is denied.
Description: An error occurred while accessing the resources required
to
serve this request. You might not have permission to view the requested
resources.

Error message 401.3: You do not have permission to view this directory
or
page using the credentials you supplied (access denied due to Access
Control
Lists). Ask the Web server's administrator to give you access.

...which is the default IIS / .NET error page.

Why do I see this instead of the correct custom error I setup in the
site
properties and also the actual page properties?

Thanks

chris





.



Relevant Pages

  • Re: IIS 6 and Server 2003 ASP.NET apps dont run well...sort of
    ... Apparently, something in your app is messing with permissions. ... granting access rights to the resource to the ASP.NET request identity. ... ASP.NET has a base process identity (typically \ASPNET on IIS ...
    (microsoft.public.dotnet.framework.aspnet)
  • Problems with custom 404 page
    ... this --- product URLS that are in our database, random requests, etc. ... Given that the request is for 404.htm, I wonder if somehow setting the ... custom error did not take for all subdirectories and IIS is trying to ...
    (microsoft.public.inetserver.misc)
  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Page Cannot Be Displayed Errors
    ... In WFetch, for Advanced Request, change to "Add Headers" and write: ... > directly on the web server, ... >>> Where can I get the IIS 6.0 Resource Kit, and how do I use WFetch? ...
    (microsoft.public.inetserver.iis)