|
|
You're in the
asp.net security
group:How to disable WinNT Login Prompt
asp.net security:
I have a few websites setup on one system on the DMZ
Accessing the website and web apps via an alias domain name (free DynDNS.Org) When I try to open default.htm I can view this page in three web apps. When I try to open the login.aspx, which accepts a querystring and will auto-login, or prompt for a login, instead I get a WinNT login Prompt. This does not occur on one of my web apps, I've dbl checked the site settings / properties and I'm not finding a difference to explain this behavior. I use this system to demo updates and changes to our clients during development. Currently when users try to access these sites via their phone the WinNT login does not display but they do get a login error msg. In other words they don't get to my login.aspx. Any info is appreciated. JeffP....
I think so, I have all three setup the same and I can only access the one
site, each is located under the same wwwroot. I have Anonymous accees enabled IUSER_BOXNAME with Let IIS control the Pwd checked as well as Integrated Windows Auth checked. All three sites setup the same are located the same machine and two were behaving badly. The WAP browser doesn't appear to enable a login, perhaps there is a hidden option. JeffP... "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote in message news:4580be631330b8c8994fe37b48af@news.microsoft.com... [quoted text, click to view] > have you enabled anonymous acccess for your app in IIS? > > --- > Dominick Baier, DevelopMentor > http://www.leastprivilege.com > >> I have a few websites setup on one system on the DMZ >> >> Accessing the website and web apps via an alias domain name (free >> DynDNS.Org) >> >> When I try to open default.htm I can view this page in three web apps. >> >> When I try to open the login.aspx, which accepts a querystring and >> will auto-login, or prompt for a login, instead I get a WinNT login >> Prompt. >> >> This does not occur on one of my web apps, I've dbl checked the site >> settings / properties and I'm not finding a difference to explain this >> behavior. >> >> I use this system to demo updates and changes to our clients during >> development. >> >> Currently when users try to access these sites via their phone the >> WinNT login does not display but they do get a login error msg. In >> other words they don't get to my login.aspx. >> >> Any info is appreciated. >> >> JeffP.... >> > >
does the anonymous account and the worker process account have read access
to all resources? --- Dominick Baier, DevelopMentor http://www.leastprivilege.com [quoted text, click to view] > I think so, I have all three setup the same and I can only access the > one site, each is located under the same wwwroot. > > I have Anonymous accees enabled IUSER_BOXNAME with Let IIS control the > Pwd checked as well as Integrated Windows Auth checked. > > All three sites setup the same are located the same machine and two > were behaving badly. > > The WAP browser doesn't appear to enable a login, perhaps there is a > hidden option. > > JeffP... > > "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote > in message news:4580be631330b8c8994fe37b48af@news.microsoft.com... > >> have you enabled anonymous acccess for your app in IIS? >> >> --- >> Dominick Baier, DevelopMentor >> http://www.leastprivilege.com >>> I have a few websites setup on one system on the DMZ >>> >>> Accessing the website and web apps via an alias domain name (free >>> DynDNS.Org) >>> >>> When I try to open default.htm I can view this page in three web >>> apps. >>> >>> When I try to open the login.aspx, which accepts a querystring and >>> will auto-login, or prompt for a login, instead I get a WinNT login >>> Prompt. >>> >>> This does not occur on one of my web apps, I've dbl checked the site >>> settings / properties and I'm not finding a difference to explain >>> this behavior. >>> >>> I use this system to demo updates and changes to our clients during >>> development. >>> >>> Currently when users try to access these sites via their phone the >>> WinNT login does not display but they do get a login error msg. In >>> other words they don't get to my login.aspx. >>> >>> Any info is appreciated. >>> >>> JeffP.... >>>
have you enabled anonymous acccess for your app in IIS?
--- Dominick Baier, DevelopMentor http://www.leastprivilege.com [quoted text, click to view] > I have a few websites setup on one system on the DMZ > > Accessing the website and web apps via an alias domain name (free > DynDNS.Org) > > When I try to open default.htm I can view this page in three web apps. > > When I try to open the login.aspx, which accepts a querystring and > will auto-login, or prompt for a login, instead I get a WinNT login > Prompt. > > This does not occur on one of my web apps, I've dbl checked the site > settings / properties and I'm not finding a difference to explain this > behavior. > > I use this system to demo updates and changes to our clients during > development. > > Currently when users try to access these sites via their phone the > WinNT login does not display but they do get a login error msg. In > other words they don't get to my login.aspx. > > Any info is appreciated. > > JeffP.... >
Are you suggesting that even though the three sites are setup the same, that
access to one is immediate and the other two require the WinNT login because the anonymous account and worker process may not have read access to aspx pages but do to .htm pages? Note: I'm prompted when I try to access the site from my dynDNS and the other I don't, but the real problem is the phone WAP browser that doesn't pop the WinNT login dialog, but instead says login fails and never shows the web app's login page. TIA JeffP.... "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote in message news:4580be631330f8c8995eadc11698@news.microsoft.com... [quoted text, click to view] > does the anonymous account and the worker process account have read access > to all resources? > > --- > Dominick Baier, DevelopMentor > http://www.leastprivilege.com > >> I think so, I have all three setup the same and I can only access the >> one site, each is located under the same wwwroot. >> >> I have Anonymous accees enabled IUSER_BOXNAME with Let IIS control the >> Pwd checked as well as Integrated Windows Auth checked. >> >> All three sites setup the same are located the same machine and two >> were behaving badly. >> >> The WAP browser doesn't appear to enable a login, perhaps there is a >> hidden option. >> >> JeffP... >> >> "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote >> in message news:4580be631330b8c8994fe37b48af@news.microsoft.com... >> >>> have you enabled anonymous acccess for your app in IIS? >>> >>> --- >>> Dominick Baier, DevelopMentor >>> http://www.leastprivilege.com >>>> I have a few websites setup on one system on the DMZ >>>> >>>> Accessing the website and web apps via an alias domain name (free >>>> DynDNS.Org) >>>> >>>> When I try to open default.htm I can view this page in three web >>>> apps. >>>> >>>> When I try to open the login.aspx, which accepts a querystring and >>>> will auto-login, or prompt for a login, instead I get a WinNT login >>>> Prompt. >>>> >>>> This does not occur on one of my web apps, I've dbl checked the site >>>> settings / properties and I'm not finding a difference to explain >>>> this behavior. >>>> >>>> I use this system to demo updates and changes to our clients during >>>> development. >>>> >>>> Currently when users try to access these sites via their phone the >>>> WinNT login does not display but they do get a login error msg. In >>>> other words they don't get to my login.aspx. >>>> >>>> Any info is appreciated. >>>> >>>> JeffP.... >>>> > >
If you are using forms-based authentication, then you typically always just
set the IIS settings to anonymous, not anon + IWA. In that case, you also need to make sure that both the worker process account and the anonymous user account have read access at the NT file system level to all the files you need to access. If the issue is related to an NT ACL problem, Filemon from sysinternals is very useful for tracking those down (assuming you can run it on the server). Joe K. -- Joe Kaplan-MS MVP Directory Services Programming Co-author of "The .NET Developer's Guide to Directory Services Programming" http://www.directoryprogramming.net -- [quoted text, click to view] "JeffP@Work" <jpgmt_at_sbcglobal_dot_net> wrote in message news:eIMfAw3yGHA.3440@TK2MSFTNGP06.phx.gbl... > Are you suggesting that even though the three sites are setup the same, > that access to one is immediate and the other two require the WinNT login > because the anonymous account and worker process may not have read access > to aspx pages but do to .htm pages? > > Note: I'm prompted when I try to access the site from my dynDNS and the > other I don't, but the real problem is the phone WAP browser that doesn't > pop the WinNT login dialog, but instead says login fails and never shows > the web app's login page. > > TIA > > JeffP.... > > "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote in > message news:4580be631330f8c8995eadc11698@news.microsoft.com... >> does the anonymous account and the worker process account have read >> access to all resources? >> >> --- >> Dominick Baier, DevelopMentor >> http://www.leastprivilege.com >> >>> I think so, I have all three setup the same and I can only access the >>> one site, each is located under the same wwwroot. >>> >>> I have Anonymous accees enabled IUSER_BOXNAME with Let IIS control the >>> Pwd checked as well as Integrated Windows Auth checked. >>> >>> All three sites setup the same are located the same machine and two >>> were behaving badly. >>> >>> The WAP browser doesn't appear to enable a login, perhaps there is a >>> hidden option. >>> >>> JeffP... >>> >>> "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote >>> in message news:4580be631330b8c8994fe37b48af@news.microsoft.com... >>> >>>> have you enabled anonymous acccess for your app in IIS? >>>> >>>> --- >>>> Dominick Baier, DevelopMentor >>>> http://www.leastprivilege.com >>>>> I have a few websites setup on one system on the DMZ >>>>> >>>>> Accessing the website and web apps via an alias domain name (free >>>>> DynDNS.Org) >>>>> >>>>> When I try to open default.htm I can view this page in three web >>>>> apps. >>>>> >>>>> When I try to open the login.aspx, which accepts a querystring and >>>>> will auto-login, or prompt for a login, instead I get a WinNT login >>>>> Prompt. >>>>> >>>>> This does not occur on one of my web apps, I've dbl checked the site >>>>> settings / properties and I'm not finding a difference to explain >>>>> this behavior. >>>>> >>>>> I use this system to demo updates and changes to our clients during >>>>> development. >>>>> >>>>> Currently when users try to access these sites via their phone the >>>>> WinNT login does not display but they do get a login error msg. In >>>>> other words they don't get to my login.aspx. >>>>> >>>>> Any info is appreciated. >>>>> >>>>> JeffP.... >>>>> >> >> > >
Don't see what you're looking for? Try a search.
|
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
| home · blog · groups | Questions? Comments? Contact the dn |