 |
|
 |
|
Next: Cannot Find Server Error using Integrated securit..
|
| Author |
Message |
External

Since: Jun 01, 2004 Posts: 3
|
(Msg. 1) Posted: Wed Jul 07, 2004 7:21 am
Post subject: IIS 6.0 Directory Browsing Doesn't Work Archived from groups: microsoft>public>inetserver>iis (more info?)
|
|
|
I have made a virtual directory on one of my personal sites on my
server pointing to a local path where I have some MP3s I want to be
able to access via HTTP. I'm running IIS 6.0 on Windows Server 2003
Enterprise. I have turned on directory browsing, disabled the default
content page, disabled anonymous access and enabled windows
authentication. I am on a domain.
I go to the address, but instead of getting a directory listing I get
a 404 error. I have double-checked the path, and that I do have
permission to access the resouce. I can access the resouce as the same
user over a network share, so I defintly have read access. Why am I
getting a 404 error instead of a directory listing?
I really have no idea what's going on. With anonymous access diabled,
and AuthNTLM on, the IIS process runs as the authenticated user,
right? For example, if I go to the resouce http://myserver/some/path
and it has AuthNTLM, then the user I login as (or am logged in as)
will be the user the IIS process runs at, and thus should have the
same level access I the user have access to. Correct?
-ee99ee >> Stay informed about: IIS 6.0 Directory Browsing Doesn't Work |
|
| Back to top |
|
 |  |
External

Since: Aug 25, 2003 Posts: 2419
|
(Msg. 2) Posted: Wed Jul 07, 2004 6:25 pm
Post subject: Re: IIS 6.0 Directory Browsing Doesn't Work [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
You have the right conceptual idea, though the details are wrong.
<font color=purple> > For example, if I go to the resouce <a style='text-decoration: underline;' href="http://myserver/some/path</font" target="_blank">http://myserver/some/path</font</a>>
> and it has AuthNTLM, then the user I login as (or am logged in
> as) will be the user the IIS process runs at, and thus should
> have the same level access I the user have access to. Correct?
IIS process does not run as the user that is logged in as. IIS runs with a
known (and configurable) process identity on the server, and it obtains a
user token from your authentication protocol. IIS then takes this user
token and "impersonates" a thread with this token. It is this thread that
does all the work on your behalf on the server and is your identity.
Threads can also call "RevertToSelf" to strip off the impersonation token
and execute as the process identity.
As for your actual question:
I suspect you will see all the 404 errors listed in the W3SVC web logs with
a substatus of "3". This behavior is by-design, and please read
troubleshooting or "what's new/changed" in F1-help of IIS Manager for more
details.
One of the fundamental changes in IIS6 is that static files are not
downloadable/browsable by default, and dynamic files are not executable by
default. The former is denied by 404.3, and the latter by 404.2. This is
for security reasons -- we don't want .ASP files to be downloadable nor
executable by default unless you configure it.
You enable static files to be downloadable/browseable by adding MIME Type
for the particular file extension. You enable dynamic files from executing
by adding/enabling a Web Service Extension for that dynamic file.
In your situation, I suggest you add a MIME Type for the .mp3 extension
under the virtual directory that you created. This allows the .mp3 files to
be downloadable. Since you enabled directory browsing, I would also make
sure that no default document exists in those directories if you wish to get
a directory listing.
--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"ee99ee" <cmiller RemoveThis @compuville.net> wrote in message
news:a8491f4f.0407070321.2fe2c3f8@posting.google.com...
I have made a virtual directory on one of my personal sites on my
server pointing to a local path where I have some MP3s I want to be
able to access via HTTP. I'm running IIS 6.0 on Windows Server 2003
Enterprise. I have turned on directory browsing, disabled the default
content page, disabled anonymous access and enabled windows
authentication. I am on a domain.
I go to the address, but instead of getting a directory listing I get
a 404 error. I have double-checked the path, and that I do have
permission to access the resouce. I can access the resouce as the same
user over a network share, so I defintly have read access. Why am I
getting a 404 error instead of a directory listing?
I really have no idea what's going on. With anonymous access diabled,
and AuthNTLM on, the IIS process runs as the authenticated user,
right? For example, if I go to the resouce <a style='text-decoration: underline;' href="http://myserver/some/path" target="_blank">http://myserver/some/path</a>
and it has AuthNTLM, then the user I login as (or am logged in as)
will be the user the IIS process runs at, and thus should have the
same level access I the user have access to. Correct?
-ee99ee<!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 6.0 Directory Browsing Doesn't Work |
|
| Back to top |
|
 |  |
External

Since: Jun 01, 2004 Posts: 3
|
(Msg. 3) Posted: Wed Jul 07, 2004 10:43 pm
Post subject: Re: IIS 6.0 Directory Browsing Doesn't Work [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
"David Wang [Msft]" <someone.TakeThisOut@online.microsoft.com> wrote in message news:<uHm2aJHZEHA.2216.TakeThisOut@TK2MSFTNGP10.phx.gbl>...
> You have the right conceptual idea, though the details are wrong.
>
<font color=green> > > For example, if I go to the resouce <a style='text-decoration: underline;' href="http://myserver/some/path</font" target="_blank">http://myserver/some/path</font</a>>
> > and it has AuthNTLM, then the user I login as (or am logged in
> > as) will be the user the IIS process runs at, and thus should
> > have the same level access I the user have access to. Correct?
>
> IIS process does not run as the user that is logged in as. IIS runs with a
> known (and configurable) process identity on the server, and it obtains a
> user token from your authentication protocol. IIS then takes this user
> token and "impersonates" a thread with this token. It is this thread that
> does all the work on your behalf on the server and is your identity.
> Threads can also call "RevertToSelf" to strip off the impersonation token
> and execute as the process identity.
>
> As for your actual question:
>
> I suspect you will see all the 404 errors listed in the W3SVC web logs with
> a substatus of "3". This behavior is by-design, and please read
> troubleshooting or "what's new/changed" in F1-help of IIS Manager for more
> details.
>
> One of the fundamental changes in IIS6 is that static files are not
> downloadable/browsable by default, and dynamic files are not executable by
> default. The former is denied by 404.3, and the latter by 404.2. This is
> for security reasons -- we don't want .ASP files to be downloadable nor
> executable by default unless you configure it.
>
> You enable static files to be downloadable/browseable by adding MIME Type
> for the particular file extension. You enable dynamic files from executing
> by adding/enabling a Web Service Extension for that dynamic file.
>
>
> In your situation, I suggest you add a MIME Type for the .mp3 extension
> under the virtual directory that you created. This allows the .mp3 files to
> be downloadable. Since you enabled directory browsing, I would also make
> sure that no default document exists in those directories if you wish to get
> a directory listing.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "ee99ee" <cmiller.TakeThisOut@compuville.net> wrote in message
> news:a8491f4f.0407070321.2fe2c3f8@posting.google.com...
> I have made a virtual directory on one of my personal sites on my
> server pointing to a local path where I have some MP3s I want to be
> able to access via HTTP. I'm running IIS 6.0 on Windows Server 2003
> Enterprise. I have turned on directory browsing, disabled the default
> content page, disabled anonymous access and enabled windows
> authentication. I am on a domain.
>
> I go to the address, but instead of getting a directory listing I get
> a 404 error. I have double-checked the path, and that I do have
> permission to access the resouce. I can access the resouce as the same
> user over a network share, so I defintly have read access. Why am I
> getting a 404 error instead of a directory listing?
>
> I really have no idea what's going on. With anonymous access diabled,
> and AuthNTLM on, the IIS process runs as the authenticated user,
<font color=purple> > right? For example, if I go to the resouce <a style='text-decoration: underline;' href="http://myserver/some/path</font" target="_blank">http://myserver/some/path</font</a>>
> and it has AuthNTLM, then the user I login as (or am logged in as)
> will be the user the IIS process runs at, and thus should have the
> same level access I the user have access to. Correct?
>
> -ee99ee
Thank you. Adding that MIME type solved the problem. IIS sure does
have ugly directory listings, though. Oh well, serves the purpose...
-ee99ee<!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 6.0 Directory Browsing Doesn't Work |
|
| Back to top |
|
 |  |
External

Since: Aug 25, 2003 Posts: 2419
|
(Msg. 4) Posted: Thu Jul 08, 2004 1:58 am
Post subject: Re: IIS 6.0 Directory Browsing Doesn't Work [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
You're right. Dir Browsing just has to be functional and secure. We're a
web-server, after all, not a web UI...
Directory listing can be made pretty with custom code in ASP. I believe
<a style='text-decoration: underline;' href="http://www.aspfaq.com" target="_blank">www.aspfaq.com</a> has such a code snippet.
--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"ee99ee" <cmiller DeleteThis @compuville.net> wrote in message
news:a8491f4f.0407071843.26d6ef2a@posting.google.com...
"David Wang [Msft]" <someone DeleteThis @online.microsoft.com> wrote in message
news:<uHm2aJHZEHA.2216 DeleteThis @TK2MSFTNGP10.phx.gbl>...
> You have the right conceptual idea, though the details are wrong.
>
<font color=green> > > For example, if I go to the resouce <a style='text-decoration: underline;' href="http://myserver/some/path</font" target="_blank">http://myserver/some/path</font</a>>
> > and it has AuthNTLM, then the user I login as (or am logged in
> > as) will be the user the IIS process runs at, and thus should
> > have the same level access I the user have access to. Correct?
>
> IIS process does not run as the user that is logged in as. IIS runs with
a
> known (and configurable) process identity on the server, and it obtains a
> user token from your authentication protocol. IIS then takes this user
> token and "impersonates" a thread with this token. It is this thread that
> does all the work on your behalf on the server and is your identity.
> Threads can also call "RevertToSelf" to strip off the impersonation token
> and execute as the process identity.
>
> As for your actual question:
>
> I suspect you will see all the 404 errors listed in the W3SVC web logs
with
> a substatus of "3". This behavior is by-design, and please read
> troubleshooting or "what's new/changed" in F1-help of IIS Manager for more
> details.
>
> One of the fundamental changes in IIS6 is that static files are not
> downloadable/browsable by default, and dynamic files are not executable by
> default. The former is denied by 404.3, and the latter by 404.2. This is
> for security reasons -- we don't want .ASP files to be downloadable nor
> executable by default unless you configure it.
>
> You enable static files to be downloadable/browseable by adding MIME Type
> for the particular file extension. You enable dynamic files from
executing
> by adding/enabling a Web Service Extension for that dynamic file.
>
>
> In your situation, I suggest you add a MIME Type for the .mp3 extension
> under the virtual directory that you created. This allows the .mp3 files
to
> be downloadable. Since you enabled directory browsing, I would also make
> sure that no default document exists in those directories if you wish to
get
> a directory listing.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "ee99ee" <cmiller DeleteThis @compuville.net> wrote in message
> news:a8491f4f.0407070321.2fe2c3f8@posting.google.com...
> I have made a virtual directory on one of my personal sites on my
> server pointing to a local path where I have some MP3s I want to be
> able to access via HTTP. I'm running IIS 6.0 on Windows Server 2003
> Enterprise. I have turned on directory browsing, disabled the default
> content page, disabled anonymous access and enabled windows
> authentication. I am on a domain.
>
> I go to the address, but instead of getting a directory listing I get
> a 404 error. I have double-checked the path, and that I do have
> permission to access the resouce. I can access the resouce as the same
> user over a network share, so I defintly have read access. Why am I
> getting a 404 error instead of a directory listing?
>
> I really have no idea what's going on. With anonymous access diabled,
> and AuthNTLM on, the IIS process runs as the authenticated user,
<font color=purple> > right? For example, if I go to the resouce <a style='text-decoration: underline;' href="http://myserver/some/path</font" target="_blank">http://myserver/some/path</font</a>>
> and it has AuthNTLM, then the user I login as (or am logged in as)
> will be the user the IIS process runs at, and thus should have the
> same level access I the user have access to. Correct?
>
> -ee99ee
Thank you. Adding that MIME type solved the problem. IIS sure does
have ugly directory listings, though. Oh well, serves the purpose...
-ee99ee<!-- ~MESSAGE_AFTER~ --> >> Stay informed about: IIS 6.0 Directory Browsing Doesn't Work |
|
| Back to top |
|
 |  |
External

Since: Aug 23, 2003 Posts: 2901
|
(Msg. 5) Posted: Thu Jul 08, 2004 1:59 am
Post subject: Re: IIS 6.0 Directory Browsing Doesn't Work [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Can you check the HTTP substatus code in the IIS logfile please? That may
shed some additional light on the problem.
Cheers
Ken
"ee99ee" <cmiller RemoveThis @compuville.net> wrote in message
news:a8491f4f.0407070321.2fe2c3f8@posting.google.com...
: I have made a virtual directory on one of my personal sites on my
: server pointing to a local path where I have some MP3s I want to be
: able to access via HTTP. I'm running IIS 6.0 on Windows Server 2003
: Enterprise. I have turned on directory browsing, disabled the default
: content page, disabled anonymous access and enabled windows
: authentication. I am on a domain.
:
: I go to the address, but instead of getting a directory listing I get
: a 404 error. I have double-checked the path, and that I do have
: permission to access the resouce. I can access the resouce as the same
: user over a network share, so I defintly have read access. Why am I
: getting a 404 error instead of a directory listing?
:
: I really have no idea what's going on. With anonymous access diabled,
: and AuthNTLM on, the IIS process runs as the authenticated user,
: right? For example, if I go to the resouce http://myserver/some/path
: and it has AuthNTLM, then the user I login as (or am logged in as)
: will be the user the IIS process runs at, and thus should have the
: same level access I the user have access to. Correct?
:
: -ee99ee >> Stay informed about: IIS 6.0 Directory Browsing Doesn't Work |
|
| Back to top |
|
 |  |
| Related Topics: | Directory Browsing - Hi to all, it is possible to edit the page returned when the user browse an HTTP directory? How?
How to enable Directory Browsing in IIS - Hi, In IIS 5, I would like to disable Directory Browsing for my root directory. However, I would need to generate some sub-directories as user login. Is it possible to enable Directory Browsing for those newly created sub-directories? Thanks for your..
Directory browsing display question - Hi all, Is there a way to alter the default view of directory browsing in IIS. For example, I would like to have a standard header and footer on pages, and perhaps have a different order to the view. I do not want to get stuck writing an ASP to look...
Directory browsing a site with index.htm - Hi My server have directory browsing enabled, but i got a index.htm side in one directory how do i do to list the files in this directory?
changing background in directory browsing - Hi. i would like to know if its possible to change the background in a dir that has directory browsing. //jonas ps. post a reply to jorreman@spray.se |
|
You can post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|
 |
|
|