Re: IIS authentication problems

On 5 Jun, 13:25, Dave P <Davey.Proc...@xxxxxxxxx> wrote:
On 5 Jun, 10:27, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
wrote:



Hello Customer,

Thank you for posting here.

According to your description, I understand that you tick Integrated
Windows Authentications, but you still be prompted to input authentication
when you access the companyweb. If I have misunderstood the problem, please
don't hesitate to let me know.

Based on my research, you are prompted to input authentication when you
access the companyweb is caused by that you enable the Basic authentication
(password is sent in clear text). As I know, the Basic authentication
(password is sent in clear text) will be perform before the Integrated
Windows Authentications, if you enable both of them. Therefore, I suggest
you clear the Basic authentication (password is sent in clear text) option
on companyweb web site:

1. Please open IIS on SBS.

2. Extend SBSname (local computer)->Web Sites->companyweb

3. Right click companyweb, select properties,

4. Select Directory Security tab, click Edit button under the
Autherntication and access control pane

5. Clear the Basic authentication (password is sent in clear text) option,
and ensure only tick the Integrated Windows Authentications option.

6. Click OK twice to finish.

Meanwhile, ensure the client computer which access the companyweb is logon
domain.

If we can not resolve the issue after we perform the above steps, please
kindly help me collect some information for further investigation:

1. Do you get any error page when you access the companyweb? If yes, please
capture screenshots on the error page and send the pictures to me at
v-ter...@xxxxxxxxxxxxx

2. Please try to access companyweb from SBS, does the issue happen again?

3. Collect the IIS log.

a. Open IIS snap-in.
b. Right click Default Web Site and click Properties.
c. Uncheck the "Enable Logging" box and click Apply.
d. Go to C:\WINDOWS\system32\LogFiles\W3SVC1 folder and move all files to a
backup location.
e. Check "Enable Logging" box and click OK.
f. Run IISReset command.
g. Reproduce the problem and send the log file in
C:\WINDOWS\system32\LogFiles\W3SVC1 folder to me for research.

4. Gather IIS Metabase:

1) Download the IIS Resource Kit tools from the following page:http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71...
B628-ADE629C89499&displaylang=en

2) Install it, run MBExplorer (Metabase Explorer)

3) Right click the "LM" node and choose "Export to file".

4) Specify a file name, specify the password and finish the export.

5) Send the file and the password to v-ter...@xxxxxxxxxxxxxx

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! -www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
checkhttp://support.microsoft.comforregional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: Dave P <Davey.Proc...@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: IIS authentication problems
| Date: Mon, 04 Jun 2007 12:07:20 -0700
| Organization:http://groups.google.com
| Lines: 19
| Message-ID: <1180984040.966768.27...@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 86.6.168.115
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1180984041 22968 127.0.0.1 (4 Jun 2007
19:07:21 GMT)
| X-Complaints-To: groups-ab...@xxxxxxxxxx
| NNTP-Posting-Date: Mon, 4 Jun 2007 19:07:21 +0000 (UTC)
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1),gzip(gfe),gzip(gfe)
| Complaints-To: groups-ab...@xxxxxxxxxx
| Injection-Info: h2g2000hsg.googlegroups.com; posting-host=86.6.168.115;
| posting-account=SQ7yPw0AAADIhVBO0N-ExE-c_tEslvjK
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!news-out.
cwix.com!newsfeed.cwix.com!newscon02.news.prodigy.net!prodigy.net!nx01.iad01
.newshosting.com!newshosting.com!216.196.98.140.MISMATCH!border1.nntp.dca.gi
ganews.com!nntp.giganews.com!postnews.google.com!h2g2000hsg.googlegroups.com
!not-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:41616
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| After installing SP1 for SBS 2003 I have an issue with IIS not
| seemingly accepting Windows Integrated Authentications.
|
| I used the 5 downloads to service pack the server and did have an
| issue with the companyweb, which microsoft sorted by installing
| sharepoint service pack 2. Within companyweb I call an IIS web page
| which changes dependant on the user logged on the computer, currently
| this prompts for credentials before displaying the page correctly
|
| I think its IIS not companyweb as if I open the same IIS webpage
| through IE negating the companyweb I still experience the same issue.
|
| I do have windows integrated authentication and basic settings chosen
| on the directory security tab of the webpages properties within IIS.
| If I change to anonymous the page goes straight in but obviously
| doesnt work correctly as I need to know the user looking at the page.
|
| Where do I go now ??
|
|

Thanks for the pointers. The webpage/application is actually in the
default website area of IIS but companyweb calls the same page so I
have followed your instructions under Default websites but still do
not seem to pass credentials through. I will endeveaour to do the
clearing of logs to get a better idea of what is happening and will
post as soon as I can.

Thanks

Dave


I have run my logging and sent the files to you. I dont really get
errors when I try to access the webpage it is a prompt to enter my
domain credentials, as I said the companyweb itself is working
correctly, its a webpage under the default web site.

Does directory security placed up at the default web site level
inherit down to any webpages/apps underneath ?

Thanks

Dave

.