Re: AD wont let me in!

From: Scott Allen (bitmask_at_[nospam)
Date: 11/29/04


Date: Mon, 29 Nov 2004 09:37:53 -0500

Possibly because IE thinks the server is in a different security zone.
You can see the indicator in the lower right. With localhost IE sends
credentials automaically - that is the default setting for the
Intranet zone. By IP IE possibly thinks it is in the Internet security
zone. This is configurable under Tools -> Options -> Security
settings.

--
Scott
http://www.OdeToCode.com/blogs/scott/
On Mon, 29 Nov 2004 03:57:03 -0800, dhnriverside <dan@musoswire.com>
wrote:
>Hi
>
>Just some more info on the problem.
>
>I've now got the <authorisation> section of my web config like so...
>
><authorisation>
><deny users="?">
></authorisation>
>
>I've tested this on the server by doing both "http://localhost/app" and 
>"http://10.0.0.254/app"
>
>When I try the first option, using localhost, I don't get a popup box and I 
>get straight in to the site, and my site works with User.Identity etc.
>
>However, i try with the IP (still on the server), I get a popup box, which i 
>put the credentials in and it works. Whys that then?
>
>Finally, if I try and access http://10.0.0.254/app from any of the other 
>machines on the network (Win98, WinXP, both IE 6.0.2800), I dont get into the 
>site, I dont get a popup login box, I just get sent straight to the 401.2 
>error page.
>
>What's going on!?!?
>
>Any help appreciated!
>
>Cheers
>
>
>Dan
>
>"dhnriverside" wrote:
>
>> Hiya
>> 
>> Yep it would seem I dont have permission! I'm not sure about the domain 
>> account. I'm logged into the computer as Administrator, and I have the domain 
>> option on the login box at startup, which of course is set to my domain. AD 
>> is setup to be a domain controller. Is that what you mean? If not, sorry, I'm 
>> quite new to AD, so all help appreciated!
>> 
>> What do I need to set the directory up to work? I'm thinking that might be 
>> the problem.
>> 
>> Web.Config wise, attached below
>> 
>> Cheers
>> 
>> 
>> Dan
>> 
>> <?xml version="1.0" encoding="utf-8" ?>
>> <configuration>
>>     
>>   <system.web>
>>         <compilation 
>>          defaultLanguage="c#"
>>          debug="false"
>>     />
>> 
>>     <customErrors 
>>     mode="Off" 
>>     /> 
>> 
>>     <authentication mode="Windows" /> 
>> 
>>     <authorization>
>>         <allow users="*" /> <!-- Deny unknown users -->
>>             <!--  <allow     users="[comma separated list of users]"
>>                              roles="[comma separated list of roles]"/>
>>                   <deny      users="[comma separated list of users]"
>>                              roles="[comma separated list of roles]"/>
>>             -->
>>     </authorization>
>> 
>>     <trace
>>         enabled="false"
>>         requestLimit="10"
>>         pageOutput="false"
>>         traceMode="SortByTime"
>> 		localOnly="false"
>>     />
>> 
>>     <sessionState 
>>             mode="InProc"
>>             stateConnectionString="tcpip=127.0.0.1:42424"
>>             sqlConnectionString="data source=127.0.0.1;Trusted_Connection=yes"
>>             cookieless="false" 
>>             timeout="20" 
>>     />
>> 
>>     <globalization 
>>             requestEncoding="utf-8" 
>>             responseEncoding="utf-8" 
>>    />
>>    
>>  </system.web>
>>  
>>  <appSettings>
>> 	<!-- Application -->
>> 	<add key="Application_Name" value="myapp" />
>> 	
>> 	<!-- System -->
>> 	<add key="System_SmtpServer" value="localhost:3099" />
>> 	<add key="System_ActiveDirPath" value="my.com" />
>> 	<add key="System_LibraryPath" value="mypath" />
>> 	<add key="System_ConnectionString" 
>> value="server=myserver;database=mydb;Trusted_Connection=yes" />
>> 	<add key="System_MaxResultsLimit" value="20" />
>>  </appSettings>
>>  
>> </configuration>


Relevant Pages

  • Re: Now wait just a dab non minute - this is getting out of hand
    ... enabled by default at all in Windows Server 2003? ... security threats I see affecting Windows server have nothing to do with IE ... I think you'd have to admit that Microsoft including IE in the default ... > Security level for the Internet zone is set to High. ...
    (microsoft.public.security)
  • Re: Runtime Error when going to Hotmail
    ... This may be a symptom of too strict security on the client side. ... BTW what zone is this URL coming up in? ... An application error occurred on the server. ... The current custom ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Runtime Error when going to Hotmail
    ... This may only be a tempory server side error. ... > security level. ... >> This may be a symptom of too strict security on the client side. ... >> BTW what zone is this URL coming up in? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • FP Form security issue
    ... I created a form in Frontpage 2003 that collects information from the user ... When I publish it on my localhost - ... provider's server every time I click Submit it prompts me for ... We tried to remove all security ...
    (microsoft.public.frontpage.client)
  • FP Form security issue
    ... I created a form in Frontpage 2003 that collects information from the user ... When I publish it on my localhost - ... provider's server every time I click Submit it prompts me for ... We tried to remove all security ...
    (microsoft.public.frontpage.extensions.windowsnt)

Loading