RE: User Security?
- From: stcheng@xxxxxxxxxxxxxxxxxxxx (Steven Cheng[MSFT])
- Date: Wed, 26 Jul 2006 13:27:55 GMT
{\rtf1\ansi\ansicpg936\deff0\deflang1033\deflangfe2052{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\lang2052\f0\fs20 Thanks for your quick response Asaf,
\par
\par Now I get that you're using the IE browser to visit the asmx page and the server gave you 401.3 error when the custom user try visiting the page. Based on my experience, this is a typical NTFS permission as the below message indicates:
\par
\par =========================
\par Error message 401.3: You do not have permission to view this directory or
\par page using the credentials you supplied (access denied due to Access Control
\par Lists). Ask the Web server's administrator to give you access.
\par =========================
\par
\par When you use "integrated windows authentication" and deny anonymous access in IIS, the client will be forced to provide a valid user identity(recognizable at server). And this identity will be forwarded from IIS to ASP.NET runtime, if the ASP.NET application is using "Windows" authentication(in web.config), it will use is security identity (from IIS) as the HttpContext.Current.User.Identity, also ASP.NET by default will perform NTFS file permision checking against this security identity for the file (aspx or asmx ) the client is requesting...
\par
\par Therefore, the problem here is whether that custom account has sufficient permission(NTFS) to access that asmx file(read permission is enough). Based on my local test, if your web application is created under the IIS default site (under c:\\inetpub\\wwwroot), the machine\\users group should have the read permission to it automatically. Is your webservice application's folder put in an external directory/drive on the server machine? Anyway, you can check your webservice application's directory's NTFS security setting (grant the custom account sufficient permision to your webservice's application dir or that certain asmx file).
\par
\par Hope this helps. If there is anything unclear or if you still meet any problem, please feel free to let me know.
\par
\par Sincerely,
\par
\par Steven Cheng
\par
\par Microsoft MSDN Online Support Lead
\par
\par
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par
\par
\par }
- References:
- RE: User Security?
- From: Steven Cheng[MSFT]
- RE: User Security?
- From: Asaf
- RE: User Security?
- Prev by Date: Web service status
- Next by Date: Re: Why Must Impersonation be Used?
- Previous by thread: RE: User Security?
- Next by thread: Intermittent Thread was being aborted problems
- Index(es):
Relevant Pages
|
