Re: Problem with IIS and Group Premissions.

From: Tom Kaminski [MVP] ((A_at_T))
Date: 04/20/04 

Date: Tue, 20 Apr 2004 11:29:16 -0400

Good point. FWIW, "not authenticate" is a 401.1 error and "not authorized"
is a 401.3 error. 

-- 
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserver2003/community/centers/iis/
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:eIXky$tJEHA.2844@TK2MSFTNGP10.phx.gbl...
> You can not authenticate? Or you are not authorized? They are different.
>
> Authentication means supplying a valid Windows username/password
> Authorization means that the Windows account you are using has appropriate
> permissions to do what you want to do.
>
> One thing to check between the two servers. Does one have a "default
domain"
> specified in the IIS properties, and the other doesn't? That may be a
> possible source of this behaviour when using Basic Auth.
>
> Otherwise, we need to troubleshoot whether you are failing authentication,
> or failing authorization.
>
> Cheers
> Ken
>
> "Jason Szotak" <jes227@psu.edu> wrote in message
> news:9219CBC7-632B-40DF-8A67-7724E7F24112@microsoft.com...
> : Hi,
> :   I am running a win2k/iis fully patched webserver.  Our website uses
SSL
> and Basic Authentication with local groups and accounts to hanlde the
> restricted area of the website.  Security is managed through the use of
> grops.  For example, I have a group called webusers which has read &
execute
> permissions on all the necessary files and folders in the website.  The
> problem is when I attempt to log in to site I am unable to authenticate.
I
> then decided to add my login account to the same files and folders as the
> webusers group, which I am a member of and voila, I was then able to
> authenticate.  What this leads me to believe is that either 1) the
webserver
> does not realize I, or anyone else in the group for that matter as I have
> tried a couple different accounts, am a member of the webusers group or 2)
> the webserver does not realize the webusers group has permission to the
> access the website.  Neither of which makes sense to me.
> :
> : As a side note I run a second webserver where I handle the restricted
> portion of the website in the exact same way and it works fine.  On this
> second server when I add numerous account to a group it does sometimes
take
> a while for the group to realize that there are new group members, so I
let
> the machine sit overnight and still was unable to authenticate this
morning.
> I then tried creating a new group with only two members and I still cannot
> authenticate, so at this point I am baffled.
> :
> : Any insight is much appreciated.
> : Thanks,
> : Jason
>
>

Relevant Pages

  • Re: Problem with IIS and Group Premissions.
    ... Authorization means that the Windows account you are using has appropriate ... restricted area of the website. ... problem is when I attempt to log in to site I am unable to authenticate. ...
    (microsoft.public.inetserver.iis)
  • Re: GenericPrincipal
    ... them up again, then you need to persist them in cache, session or in a ... forms or windows authtentication. ... Then use that for authorization throughout the application ... to have to authorize and authenticate some one on each request. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Client and Server NTLM authentication
    ... an IIS6 website. ... this site) where they can enter the credentials of an account for the ... there is a time issue in that the clients try to contact a DC in this ... about 15secs the client gives up trying to authenticate with the DC ...
    (microsoft.public.inetserver.iis.security)
  • Re: AuthorizationStoreRoleProvider Issues
    ... authenticate fine but no one is now able to enter the application. ... I have my roles configured through azMan and they are mapping to the ... enhancements as far as roles based and authorization based security. ... Tim belongs to the DCO_User group, while TestMan does not belong to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Help With Security Please
    ... and I am wondering how I shoudl handle security. ... first inclination is to use the Web.config and use Authorization to ... here connect to Active Directory and authenticate the users that way, ...
    (microsoft.public.dotnet.framework.aspnet.security)
Loading