Groups | Blog | Home
all groups > iis security > march 2004 >

iis security : NTLM authentication failed(code-2146893048)


wab
3/6/2004 5:01:00 PM
I get the above error when I try to create a new project.using Interdev 6.0
and the message occurs when it wants a user name and password, but none of
my passwords work. Seemed to work OK before i installed Symantec Internet
Security!
I get another error also, "You are not authorized to perform the current
operation."

yonlinemanghn NO[at]SPAM online.microsoft.com
3/10/2004 1:09:01 AM
Hello,
It appears that Symantec antivirus is behaving like a proxy server, and
preventing the NTLM authentication information from being passed to the web
server. You can disable Symantec to confirm that this is indeed the case.

As a workaround, you can disable Windows Integrated authentication in IIS
and enable Basic. To do this, open the IIS Manager (Administrative tools->
Internet services manager), right click on the Default website->
Properties-> Directory Security-> Edit button in the Anonymous access and
authentication control section-> Uncheck Integrated and select Basic.

Hope this helps!

Thanks,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server

*********************************************************************
[quoted text, click to view]
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2003 Microsoft Corporation. All rights reserved.
*********************************************************************
Walt Brown
3/11/2004 6:58:18 PM
Thankyou. Running Interdev 6.0, I was unable to create a new project
and kept getting "NTLM authentication failed...". Or I would get "You
are not authorized to perform the current operation". I changed to
Basic Authentication and was able to create a new project, but I am now
worried that user names and passwords will be sent over the internet. I
have Internet Security (Symantec) installed. What are the real risks
with Basic Authentication?



*** Sent via Developersdex http://www.developersdex.com ***
Bernard
3/12/2004 11:18:52 AM
Basic auth send user credentail in plaintext mode, hence if someone get
sniff the packet, they will know your password. It is always recommended to
deploy SSL + basic auth to avoid such risk.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

yonlinemanghn NO[at]SPAM online.microsoft.com
3/12/2004 7:30:56 PM
Wab,
As Bernard pointed out, you must use SSL when having Basic authentication
enabled on the site. Here are some links that will help you configure SSL:
http://support.microsoft.com/default.aspx?scid=kb;en-us;299875
http://support.microsoft.com/default.aspx?scid=kb;en-us;299525
http://support.microsoft.com/default.aspx?scid=kb;en-us;216907

Good luck
Thanks,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server

*********************************************************************
[quoted text, click to view]
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2003 Microsoft Corporation. All rights reserved.
*********************************************************************
AddThis Social Bookmark Button