IIS4 Security

[mousematt]

On our intranet we have an IT section with passwords etc and need it to only be avaliable to the it group, it also has asp's when ever someone trys looking at this section it comes up with this error;
HTTP Error 401
401.2 Unauthorized: Logon Failed due to server configuration

This error indicates that the credentials passed to the server do not match the credentials required to log on to the server. This is usually caused by not sending the proper

http://WWW-Authenticate

header field.

Please contact the Web server's administrator to verify that you have permission to access to requested resource.

Does any one know where i'm going wrong, even if i put it back to anonymous it still comes up with error:access denied

HELP!

 

[Cranberry]

Hi there mousematt.

are you running a proxy server of any kind on your intranet?

 

[mousematt]

Yes MS Proxy 2, I've given IUSER_<server> NTFS permissions to most of the folders and they seem to be ok, but I don't think that they are working as when i take off anonymous and just have NT Authentication it still gives me a permissions error.

 

[Cranberry]

The error is saying that the password you supplied isn't correct. We had problems using challenge response over an intranet when a proxy was involved. Have you enabled access control on the proxy? If you have, try turning it off, and see if that is causing the problem. IIS does not allow you to supply transient authentication, so you may want to check to see if the web server in your domain or a workgroup: so it can access the domain sam database. Also if the correct ntfs permissions have been placed on the folder that contains the asp pages.

It is There are some knowledge base articles from Microsoft relating to this.

http://support.microsoft.com/support/kb/articles/Q251/1/99.ASP

and

http://support.microsoft.com/support/kb/articles/Q253/6/67.ASP

there is also a FAQ page for proxy server.

http://support.microsoft.com/directory/content.asp?ID=FH;EN-US;prs&FR=0&SD=GN&LN=EN-US&CT=SD&SE=NONA

Hope this helps.

 

[DomPedro]

I've just had a very similar issue, but found that it only affected some users. I had Windows Challenge Response enabled and eventually found that many proxy servers don't support it. I've had to enable Basic Authentication to get round it, which I believe is a bit of a security risk (passwords are sent in clear text), so might have to look into SSL.

So try enabling Basic Authentication and make sure that the users have &quot;Log on locally&quot; access rights to the NT server.