Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Authentication / login box issues

Status
Not open for further replies.

Hondy

Technical User
Mar 3, 2003
864
GB
Hi

I have a problem where some of my customers are seeing a login prompt when they shouldn't be.

I know the error is caused by turning off "anon access" etc. on a particular directory but this shouldn't be the case.

There are 2 virtual websites, one is and the other is media.example.com. The login message appears to be caused by "media.example.com" somewhere. There are many many directories within that and there are a few servers NLB'd up.

I can't seem to replicate the problem but it is definately happening as I have screen shots from the customers. I have searched through the logs for 401 errors and the like but can't find any at all on media on any of the servers.


What I need is a crawler or something that will browse my site and tell me which file or directory is asking for a password... i.e. gives a 401 error.

If not, does anyone have any ideas of how to resolve this given that I can't replicate the problem?

Interestingly the login prompt says "Restricted Area" in the box title, I'm not sure if this is a default title or not. I know in an htaccess file you can set the title, but I haven't.

Thanks

H
 
Your 'many files and directories' do they have the same NTFS permisions set? You may find that a certain folder or file has a different set of permissions causing this popup.

You also suggested there are several servers that are being used from the one site, does the account used have access across all server?
 
Hi Dinkytoy - yes the permissions are all set fine. The odd thing is that the error message I get implies that "basic authentication" is to blame here due to the message:

"this server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection)"

BUT - basic authentication is not installed in the roles section of any of the servers!! (IIS7)

I'm still getting complaints, I'm not even getting any 401's in the IIS logs, this is just driving me nuts!

Cheers

H
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top