Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

anonymous authentication and iis 6

  
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  Installation was made - but Apache does not start..  
Author Message
user1661

External


Since: May 05, 2004
Posts: 2



(Msg. 1) Posted: Wed Dec 22, 2004 9:35 pm
Post subject: anonymous authentication and iis 6
Archived from groups: microsoft>public>inetserver>iis (more info?)
Hi, having stupid problems with a newly created web on windows server
2003 / IIS6.0.

Essential question for this post: How can I allow anon access to VPN
client browsers? Read on...

The web is currently the only web site on the server. I have enabled
anon access, and used the default IUSR_... account for this. As it
happens I have also left checked the 'Integrated Windows Authentication'
access box.

I have ensured that the IUSR_... account on the local machine also has
the correct NTFS file system permissions on the directory and
sub-folders/files for the web resource files (i.e. the ASP and HTML
pages). The NTFS permissions are 'Read & Execute', 'List Folder
Contents' and 'Read'. I have checked that there are no other special
Deny permissions set as well.

I connect to the box via a Nortel VPN client, other users will do the
same I believe. They may also be part of a sub-domain, but I haven't
really been told.

Once VPN'd in I browse to the root of the web from my PC, but a login
dialog appears. Why does the dialog appear when I have anon acess
enabled? Obviously when I browse to the web locally from the server it
comes up no problems.
Anyway, two variations here:
1. I log in using a local domain account for the server,
2. I don't log in (Cancel the dialog).

When I do #1 I get through. But why do I need to authenticate when anon
access is allowed?

When I do #2 I get 403-3 - Unauthorised due to ACL on Resource. Why? The
NTFS permissions are set for the anon user (IUSR_...) to allow read etc.

If I go back to inetmgr and UN-check the 'Integrated Windows
Authentication' access box, then browse the web I immediately get a
403-1 http Error. Why? I have anon access enabled!

I really don't understand what I'm doing, but I guess you realise that
by now Smile

I hope I've given all the info required. Any more just ask.

Ben

 >> Stay informed about: anonymous authentication and iis 6 
Back to top
Login to vote
qbernard1

External


Since: Dec 23, 2003
Posts: 905



(Msg. 2) Posted: Thu Dec 23, 2004 12:35 am
Post subject: Re: anonymous authentication and iis 6 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
what's the url format you trying to access ? it looks like it's using
Integrated windows auth rather than anonymous. I would start looking at the
iis log file, what's the entries when you trying to log on.

next, create a simple hello.html, put it at the web path and try to browse
it. same problem ? ensure iusr has at least READ permission on the html
file.

--
Regards,
Bernard Cheah
<a style='text-decoration: underline;' href="http://www.tryiis.com/" target="_blank">http://www.tryiis.com/</a>
<a style='text-decoration: underline;' href="http://support.microsoft.com/" target="_blank">http://support.microsoft.com/</a>
<a style='text-decoration: underline;' href="http://www.msmvps.com/bernard/" target="_blank">http://www.msmvps.com/bernard/</a>



"ben h" <hairyguard-newsgroups.TakeThisOut@yahoo.co.uk> wrote in message
news:41ca259a$0$21870$61ce578d@news.syd.swiftdsl.com.au...
 > Hi, having stupid problems with a newly created web on windows server 2003
 > / IIS6.0.
 >
 > Essential question for this post: How can I allow anon access to VPN
 > client browsers? Read on...
 >
 > The web is currently the only web site on the server. I have enabled anon
 > access, and used the default IUSR_... account for this. As it happens I
 > have also left checked the 'Integrated Windows Authentication' access box.
 >
 > I have ensured that the IUSR_... account on the local machine also has the
 > correct NTFS file system permissions on the directory and
 > sub-folders/files for the web resource files (i.e. the ASP and HTML
 > pages). The NTFS permissions are 'Read & Execute', 'List Folder Contents'
 > and 'Read'. I have checked that there are no other special Deny
 > permissions set as well.
 >
 > I connect to the box via a Nortel VPN client, other users will do the same
 > I believe. They may also be part of a sub-domain, but I haven't really
 > been told.
 >
 > Once VPN'd in I browse to the root of the web from my PC, but a login
 > dialog appears. Why does the dialog appear when I have anon acess enabled?
 > Obviously when I browse to the web locally from the server it comes up no
 > problems.
 > Anyway, two variations here:
 > 1. I log in using a local domain account for the server,
 > 2. I don't log in (Cancel the dialog).
 >
 > When I do #1 I get through. But why do I need to authenticate when anon
 > access is allowed?
 >
 > When I do #2 I get 403-3 - Unauthorised due to ACL on Resource. Why? The
 > NTFS permissions are set for the anon user (IUSR_...) to allow read etc.
 >
 > If I go back to inetmgr and UN-check the 'Integrated Windows
 > Authentication' access box, then browse the web I immediately get a 403-1
 > http Error. Why? I have anon access enabled!
 >
 > I really don't understand what I'm doing, but I guess you realise that by
 > now Smile
 >
 > I hope I've given all the info required. Any more just ask.
 >
 > Ben<!-- ~MESSAGE_AFTER~ -->

 >> Stay informed about: anonymous authentication and iis 6 
Back to top
Login to vote
theo1

External


Since: Jan 21, 2005
Posts: 2



(Msg. 3) Posted: Fri Jan 21, 2005 2:31 am
Post subject: Re: anonymous authentication and iis 6 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
I have a very similar problem to ben h, and have tried the same things as
him. VPN is not involved in my case; all users are prompted to logon to
internal websites hosted on a new W2K3 Server with IIS6.

The problem seems to arise with active (i.e. .asp and .aspx) content only.
If I create a .htm page and navigate to it, I am not prompted to logon.

This problem also only arises on new websites using their own host-headers
(i.e. http://newweb.local/). If I create a virtual directory within the
default web site and point it at the same code directory (i.e.
http://server/newweb/), then I am not prompted to logon.

It would be great to get this sorted, as I am creating all new webs on this
server (now up to 6) and logging on every time I want to look at them is very
annoying.
 >> Stay informed about: anonymous authentication and iis 6 
Back to top
Login to vote
theo1

External


Since: Jan 21, 2005
Posts: 2



(Msg. 4) Posted: Fri Jan 21, 2005 4:07 am
Post subject: Re: anonymous authentication and iis 6 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
"Theo" wrote:
 > This problem also only arises on new websites using their own host-headers
 > (i.e. <a style='text-decoration: underline;' href="http://newweb.local/" target="_blank">http://newweb.local/</a>). If I create a virtual directory within the
 > default web site and point it at the same code directory (i.e.
 > <a style='text-decoration: underline;' href="http://server/newweb/" target="_blank">http://server/newweb/</a>), then I am not prompted to logon.

I have now tracked down the fact that anonymous authentication is not
working at all, so I presume this is down to default settings on an out of
the box W2K3/IIS6 installation.

The reason Windows Authentication is not working automatically is down to IE
not believing the host-header domain is part of the intranet zone. In trying
to rectify this, I have also found that IE will not accept our internal
domain name as a valid trusted site; I have set up a number of different
versions, and only one works:

*.domainname - can't be added as trusted
*.ad.domainname - can't be added as trusted
*.web.domainname - CAN be added!

So I have had to add a .web.domainname host-header for each site and into
the DNS.

This has solved the problem internally, but it does put me off upgrading our
external web server from Windows 2000 to 2003; if I were to upgrade, would
the current settings be kept so that anonymous authentication was allowed by
default?<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: anonymous authentication and iis 6 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
IIS 6.0 Anonymous Auth - Manually moving data from Old server NT4/IIS 4.0 to Win2k3 Server/IIS 6.0. Having trouble getting the Anonymous Authentication (AA) to work correctly. If the AA user is set to IUSR then the user is prompted for a login, if the AA user is set to..

Anonymous access?? - Does anyone know how to fix an authentication problem on Windows 2000 servers? I built a 2000 web server and now I have to type in my user name and password and the server is suppose to allow anonymous access. Any help would be greatly appreciated!

Anonymous Sign-In pop up - Hi, I was changin the IIS configiuration in order to fix some problem. I unchecked the anonymous access once. But it did not fix my problem. So I came back to check anonymous access again, and enter IUSR_machinename and the password of the administrato...

ASP Anonymous Denied - I have just set up a basic (so far internal) web page with a basic default.htm and menu.asp. When I go to www.website.com, it brings up the defualt.htm page with no problems. If I go to www.website.com\menu.asp, it immediately prompts for the Login/..

Anonymous access - Hi, I'am new to iis and trying to get running a sample ASP.NET starter kit. It is running fine within my home network but i can't get access from internet. What can go wrong? I did allow anonymous access in iss. And it's not a router problem for sure. ..
   Web Hosting and Web Master Forums (Home) -> IIS All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]