Re: access to network file server through web server denied

Thank you very much for the response. Before I check with the network team to
see whether the network has been configured with "Delegation", I have one
question. On our local developer's web server (It can be IIS 5 on Windows XP
or IIS 7 on Vista), we do not have this problem at all. Is that means that
for developer's web server to access network resources, there is no need for
the delegation to be configured?

Thanks.

"DaveMo" wrote:

On Feb 18, 5:44 am, xcomplus <xcomp...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
Here is the setup:
IIS 6 on Windows Server 2003
On IIS: Anonymous access unchecked. Integrated windows authentication checked.
Inside Web.config:
<authentication mode="Windows"/>
<identity impersonate="true"/>

In the code of the problem page, call WindowsIdentity.GetCurrent().Name
returns the domain user logged on that can access the network file server..
However, as soon as it calls Directory.GetDirectories(network_path), the
login dialog to the web server will popup. The login dialog can not recognize
correct credential and continue to popup for three times. After that, the
error message says "Access to path 'network_path' is denied.

You are describing a transitive authentication scenario which requires
delegation to be configured. More information on how to do this here:
http://support.microsoft.com/kb/810572

I'm not exactly sure what's driving the login dialog behavior and why
it's rejecting the credentials. If you can provide more information on
the desired behavior - i.e. do you want to have the delegated
authentication experience for your users, or do you want them to be
able to retype their creds (or different creds?) - then other
information might be out there to assist you in solving the problem.

HTH,
Dave

.

Relevant Pages

  • Re: access to network file server through web server denied
    ... For setting up Kerberos and Delegation, I have a set of FAQ available here: ... On our local developer's web server (It can be IIS 5 on Windows XP ... Integrated windows authentication> checked. ...
    (microsoft.public.inetserver.iis.security)
  • Re: ASP.Net impersonation using Oracle..Help!!
    ... is ur web server and iis on the same box? ... If there are on different box then its a delegation issue ... my web application is running on iis on windows xp professional. ... > The strange this is that it WORKS if I explicitly set ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Forward address to directory
    ... > this it is our main web server and server for the network. ... > want to do is to make it easier to access OWA (Outlook Web Access) we ... > want to forward a web address to a virtual directory on iis. ...
    (microsoft.public.windows.server.dns)
  • Re: Security risks when running IIS without static ip as localhost
    ... >access this web server, it is purely for developing asp pages which will ... >network to a security risk. ... pay attention to what I explicitly stated -- IIS must be ... It's as if the back door of your house was labled 127.0.0.1 and the ...
    (microsoft.public.inetserver.iis.security)
  • Re: Remote process with network access
    ... If you have a internet-exposed web server, ... If yes, via Windwos-Integrated-Authentication, or via SSL? ... than delegation OFF will not save you. ... > able to access other boxes on the network. ...
    (microsoft.public.win32.programmer.wmi)