"Jonny Bergdahl" <jonnybergdahl@newsgroups.nospam> wrote in message
news:%23htijj6fEHA.3320@TK2MSFTNGP11.phx.gbl...
>I have a web with a section of it setup to require a password. I have
> enabled Basic authentication and added the local domain to the default
> domain setting.
>
> When I log in using just my logon name, access is denied and the following
> is logged in the Security event log:
> Security/Account Logon/EventID 681:
> The logon to account: <deleted>
> by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> from workstation: <deleted>
> failed. The error code was: 3221225572
>
> The error codes indicates that the user does not exist???
>
> If I enter the logon name in the DOMAIN\USERNAME style, everything works
> as
> intended.
>
> Question is; Why is IIS ignoring my default domain setting, and how do I
> get
> this to work as intended?
>
> Regards;
> /jb
>
>

> taken effect. Please do not click 'browse' to select your domain but
> simply input your domain name(just the same as the prefix of
> <domain>\<username> without '\') in the 'Domain Name' textbox. Also,

"Jonny Bergdahl" <jonnybergdahl@newsgroups.nospam> wrote in message
news:%23Qqkt1FgEHA.2536@TK2MSFTNGP09.phx.gbl...
>> taken effect. Please do not click 'browse' to select your domain but
>> simply input your domain name(just the same as the prefix of
>> <domain>\<username> without '\') in the 'Domain Name' textbox. Also,
>
> I have verified that the domain name is entered correctly, and the machine
> has been completely rebooted since the settings were made. It works when
> autentication is made over NTML, but not when using Basic.
>
> This is the result when running Wfetch (Basic, only User and Passwd set):
> REQUEST: **************\n
> GET /templates/Home.asp?id=2213 HTTP/1.0\r\n
> Host: 10.1.2.19\r\n
> Accept: */*\r\n
> Connection: Keep-Alive\r\n
> Authorization: Basic <xxxx>\r\n
> \r\n
> RESPONSE: **************\n
> HTTP/1.1 401 Unauthorized\r\n
> Via: 1.1 FIREWALL\r\n
> Connection: close\r\n
> Proxy-Support: Session-Based-Authentication\r\n
> Connection: Proxy-Support\r\n
> Expires: Fri, 04 Jun 2004 00:26:29 GMT\r\n
> Date: Thu, 12 Aug 2004 11:06:29 GMT\r\n
> Content-Type: text/html\r\n
> Server: Microsoft-IIS/5.0\r\n
> WWW-Authenticate: Negotiate\r\n
> WWW-Authenticate: NTLM\r\n
> WWW-Authenticate: Basic realm="10.1.2.19"\r\n
> Pragma: no-cache\r\n
> Set-Cookie: loggedon=1; path=/\r\n
> Cache-control: no-store\r\n
> \r\n
>
> This is the result when running Wfetch (Basic, Domain, User and Passwd
> set):
> REQUEST: **************\n
> GET /templates/Home.asp?id=2213 HTTP/1.0\r\n
> Host: 10.1.2.19\r\n
> Accept: */*\r\n
> Connection: Keep-Alive\r\n
> Authorization: Basic <xxxx>\r\n
> \r\n
> RESPONSE: **************\n
> HTTP/1.1 200 OK\r\n
> Via: 1.1 FIREWALL\r\n
> Connection: Keep-Alive\r\n
> Proxy-Connection: Keep-Alive\r\n
> Content-Length: 5524\r\n
> Expires: Fri, 04 Jun 2004 00:31:11 GMT\r\n
> Date: Thu, 12 Aug 2004 11:11:11 GMT\r\n
> Content-Type: text/html\r\n
> Server: Microsoft-IIS/5.0\r\n
> Pragma: no-cache\r\n
> Set-Cookie: loggedon=1; path=/\r\n
> Cache-control: no-store\r\n
> \r\n
>
> For comparision (NTML, only User and Passwd set):
> REQUEST: **************\n
> GET /templates/Home.asp?id=2213 HTTP/1.0\r\n
> Host: 10.1.2.19\r\n
> Accept: */*\r\n
> Connection: Keep-Alive\r\n
> Authorization: NTLM <xxxxx>\r\n
> \r\n
> RESPONSE: **************\n
> HTTP/1.1 401 Access Denied\r\n
> Via: 1.1 FIREWALL\r\n
> Connection: Keep-Alive\r\n
> Proxy-Support: Session-Based-Authentication\r\n
> Connection: Proxy-Support\r\n
> Content-Length: 24\r\n
> Date: Thu, 12 Aug 2004 11:08:22 GMT\r\n
> Content-Type: text/html\r\n
> Server: Microsoft-IIS/5.0\r\n
> WWW-Authenticate: NTLM <xxxxx>\r\n
> \r\n
> SEC_E_OK - InitializeSecurityContext\n
> Error: Access is Denied.
> REQUEST: **************\n
> GET /templates/Home.asp?id=2213 HTTP/1.0\r\n
> Host: 10.1.2.19\r\n
> Accept: */*\r\n
> Connection: Keep-Alive\r\n
> Authorization: NTLM <xxxxx>\r\n
> \r\n
> RESPONSE: **************\n
> HTTP/1.1 200 OK\r\n
> Via: 1.1 FIREWALL\r\n
> Connection: Keep-Alive\r\n
> Proxy-Connection: Keep-Alive\r\n
> Content-Length: 5524\r\n
> Expires: Fri, 04 Jun 2004 00:28:22 GMT\r\n
> Date: Thu, 12 Aug 2004 11:08:22 GMT\r\n
> Content-Type: text/html\r\n
> Server: Microsoft-IIS/5.0\r\n
> Pragma: no-cache\r\n
> Set-Cookie: loggedon=1; path=/\r\n
> Cache-control: no-store\r\n
> \r\n
>
> Please advice.
>
> Regards;
> /jb
>
>

> The "realm" should list your domain. 10.1.2.19 is not a Windows domain. A
> Windows domain should be the NetBIOS name of the domain in question.

> Have you checked the server's local SAM yet? Does the same local
> account exist?

> Integrated authentication doesn't work with the default logon domain
> setting. So if you can login the site via NTLM without input the
> <domain>\ prefix, it means you should have a local account with the

> local security policy). 'Log on locally' is required by Basic but not