all groups > iis security > november 2005
Filter by week: 1 2 3 4 5
HTTP status 401: Unauthorized
Posted by myao2005 NO[at]SPAM gmail.com at 11/30/2005 11:11:47 PM
Not sure this is the right group to post my question.
We are using windows 2003+ asp.net. We have a virtual directory with
the "Anonymous Access" disabled. We are using "Integrated Windows
Authentication" and "Baisc authentication" for this virtual directory.
This virtual directory is automati... more >>
Can't see the security sheet of directory on "proprities"
Posted by Naby at 11/30/2005 3:09:02 PM
Hi everybody
My entire system was formatted using NTFS, how is it possible that I cannot
see the security tab on the files "properties" sheet?
I want to change accees rights
Thank you for your help.... more >>
how to Grant "write" permission to a user
Posted by Naby at 11/30/2005 12:22:07 PM
Hello everybody
how do I grant a user, actually an asp.net web page, writing priviledges on
a folder?
Thank you.... more >>
FTP Server Logging
Posted by MikeV06 at 11/30/2005 11:57:01 AM
I monitor my router and ftp logs on Server 2003. As would be expected, port
21 packets show up in both. However, I have an instance where the router
shows an incoming and outgoing packet for port 21. However, no entry was
made in the ftp log.
The router shows
Nov 29, 2005 12:25:37.302 UTC ... more >>
File not found message when file is acutally there
Posted by Keith at 11/30/2005 8:38:20 AM
We have Siteminder loaded on a Windows 2003 server with IIS6. Part of this
software installs files with a .unauth extenstion. When you browse to these
files you ger a 404 File Not Found message even though the file is there.
Any ideas?
Thanks,
Keith... more >>
IIS6 - Virtual Directory to UNC Share error 1326
Posted by DaveS at 11/30/2005 2:11:03 AM
Trying to map an IIS virtual directory to an area on a separate file server.
The machine running IIS is running stand-alone (no domain). The file server
is in a domain.
The virtual directory is mapped using the Connect As structure using a
domain account and password known to the file ser... more >>
IIS 6.0 authentication ISSUE from a FQDN vs http://name
Posted by Mike S at 11/29/2005 5:32:02 PM
iis 6 authentication ISSUE-------------
Issue- we have a virutal webiste (named WEBSITE) that we only want users of
a certain group to be able to access. The AD domain name is ABC.com. The
dns name for the website is WEBSITE.XYZ.COM. The host headers are setup as
follows- WEBSITE and WE... more >>
SSL
Posted by jaggei at 11/29/2005 5:34:32 AM
I have four web applications under default website in IIS. I want to enforce
SSL only on some pages in all these applications ,where i gather user
information. How to go about it. this application is available to users on
internet.
Thanks in Advance
... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Basic IIS authentication only works with administrator account
Posted by Joemtz at 11/28/2005 1:49:06 PM
Hey everyone,
I'm familiar working with Windows 2k Servers. I restrict access to virtual
directories or websites either by uncheking the "allow anonymous" or
adjusting ACL's on the folder where the website is. Then asign a standard
user account to those ACL's.
Problem is that since I up... more >>
LSASS due to Web request
Posted by Serge Pashkov at 11/28/2005 8:12:21 AM
My question is similar to one issued in this group in the beginning of
September
"Lsass error - Possible IIS breaking through web request"
We suffer from regular crash of Windows 2000 Server due to following error:
"The security package Negotiate generated an exception. The package is now
d... more >>
How to deploy a CGI web service
Posted by Barak at 11/27/2005 12:00:00 AM
I have an IIS6, and a CGI (.exe) web service I want to deploy.
I put the .exe in a virtual directory of it's own.
I understand I need to give execution rights in this directory, I want to
know if there is a way that I can prevent someone from putting another .exe
file in the same place and r... more >>
Integrated Windows Authentication authenticating the wrong user
Posted by teedilo NO[at]SPAM gmail.com at 11/23/2005 10:57:56 PM
I support an application that supports Integrated Windows
Authentication. I am running into a strange problem with my own user
account. It appears that Internet Explorer is passing the wrong
credentials to the web server, because the application is trying to
authenticate me with the wrong user... more >>
Directories and subdirectories permissions
Posted by Alan Wen at 11/23/2005 12:04:06 PM
IIS6 - Windows 2003 Ent.
I have an FTP site with numerous hundreds of directories/contents. I do not
want the user to be able to traverse up a folder and see all this content -
I just want them to see the content of the link I send them - they would not
know the other folders that are in the... more >>
Website Problems
Posted by George Schneider at 11/23/2005 9:01:11 AM
We have a Webserver called webserver1 that we can get to from our main ste
without a problem. The problem is when we're at another location and we
cannot get to this server. I can't browse to it or ping it from another
location. The server is listed corectly in DNS. What would cause us to... more >>
website authentication question
Posted by orangenick2002 NO[at]SPAM yahoo.co.uk at 11/23/2005 5:58:20 AM
Hi, I work for a consultancy that is offers free hosting to an NPO.
they have requested that a part of the website be available only to
certain users (around 2000). I'm not sure how to do this as I've never
made a website with authentication other than internal websites with
authentication base... more >>
Cannot find server or DNS Error - ISS 6.
Posted by Sezgin at 11/23/2005 4:04:02 AM
Hi,
2 node Windows 2003 NLB Cluster,IIS 6.0 Running in IIS 5.0 Isolation mode.
An identical web site on both nodes.Web site does not allow Anonymous
access.Used to run fine until recently. Now we get the "Cannot find server or
DNS Error" error message. When I configure the web sites to Allow... more >>
Anonymous NNTP access
Posted by Guus Ellenkamp at 11/23/2005 12:00:00 AM
I am trying to set up Anonymous access for an nntp virtual server. I created
an account for that IUSR_NEWS and added the credentials in the appropriate
field.
When using another user it works fine (Integrated authentication), but when
I choose Anonymous and add the new account, it doesn't w... more >>
SPN for website (with AppPool) running under a Host Header
Posted by Iain Sandercock at 11/22/2005 9:42:01 PM
Hi All,
I've dealt alot with kerberos in the past, and have a good understanding. My
dilemma is that I'm trying to get a more complex scenario running, and am
after a definitive example from someone who has got this working, just to
confirm that I'm heading down the right path....
I hav... more >>
IIS SSL Encryption handshake information
Posted by John McClain at 11/22/2005 1:41:09 PM
We have a servlet that is served by Tomcat. IIS is employed to redirect ot
Tomcat via AJP. IIS is also SSL enabled as our data is sensistive.
I am setting IIS to use SSL encryption on the default website. I have a
redirector that forwards request to Tomcat
I wish to call a jsp in Tomcat an... more >>
Integrated Windows Authentication fails
Posted by Wouter Demuynck at 11/22/2005 6:40:51 AM
Hi,
I'm encountering a problem which is quite 'mysterious' to me.
Scenario:
- Windows XP Pro SP2 with IIS 5.1, acting as both server and client
- a virtual directory /tests/secured/ with Directory Security set to
"Integrated Windows Authentication" (IWA) (no other options are
enabled)
I... more >>
SSL info
Posted by rahul_2065 NO[at]SPAM yahoo.co.uk at 11/22/2005 3:09:48 AM
Is it possible to buy SSL certicates cheaper from somewhere? I want to
use it for multiple sites and don't want the hassle of going through
whole of the procedure all over again.Thanks.
... more >>
SSL/Non-SSL on 1 Server
Posted by nabimomo at 11/21/2005 10:44:06 PM
I currently have 2 web sites on 2 different servers: 1 ssl and 1 non-ssl
sites. I am planning to move the ssl site to the non-ssl server which is a
Windows 2003, IIS6 box. I figure I would setup the 2 sites using 2 different
virtual directories.
1) Do I export and then import the certifica... more >>
Public IP as Relay?
Posted by Eduardo T at 11/21/2005 11:26:58 AM
Is it safe to use the public IP of a server as a relay in IIS? I'm
testing the SMTP server in IIS. A web app on this server needs to be
able to send email. The only way I've got it to work so far is by
going into Default SMTP Virtual Server Properties > Relay Restrictions
> selecting "Only th... more >>
About SSL
Posted by rahul_2065 NO[at]SPAM yahoo.co.uk at 11/21/2005 6:07:34 AM
I am working on a shopping cart website and for that I need SSL. The
problem is that I don't know how to install SSL.
Is it possible to download it from a website or do I need to buy it.If
I have to buy it then from where can I buy it from and how much it
costs?
Any information about SSL will ... more >>
Server.CreateObject("Scripting.FileSystemObject")
Posted by MoF at 11/20/2005 12:00:00 AM
Hello!
I have for a long time used the line:
Set FS=Server.CreateObject("Scripting.FileSystemObject")
in my ASP code. Suddenly one day this week it stopped working and I now get
the error:
Server object error 'ASP 0177 : 800401f3'
Server.CreateObject Failed
If I add the IUsr_<Compute... more >>
Page Cannot Be Displayed with SSL (not 443port)
Posted by sebnunes NO[at]SPAM hotmail.com at 11/17/2005 8:27:08 AM
Hi all,
I have a strange problem here. I have only two IP's and I need SSL on
different web sites so I have configured one web site to use the port
444 for SSL.
It's seems to work fine, when I'm on my desktop I connect to the web
site using https it works fine, but on another computer when ... more >>
Cannot view my website
Posted by Pete at 11/17/2005 6:18:03 AM
I have changed IIS to point to my default location
(C:\inetpub\wwwroot\oursite\), changed the default document to default.aspx
(my default doc), allowed HTTP traffic in the XP Firewall settings, allowed
anonymous access in IIS.
Why can't I get to my site via the IP address (http://209.183.x... more >>
cname does not match
Posted by Guus Ellenkamp at 11/17/2005 12:00:00 AM
I am trying to set up a secure connection for my SMTP server. However, when
I try to send messages, I get the following error message:
The certificate's CN name does not match the passed value.
How do I create the correct certificate?
server name: main.megaheights.net
I am using an e-m... more >>
Read Only Access
Posted by Mark St Laurent at 11/16/2005 8:29:59 PM
I have created a vitual directory "Financials" on internal web server which
is using IWA to access excel spreadsheets. When a user with NTFS full
permissions accesses directory all files open. When a user with Read &
Execute, List Folder Contents and Read access opens the web folder the
fold... more >>
SSL Host Headers IIS 6.0
Posted by Jeniffer K at 11/16/2005 2:01:12 PM
Today is the first time I've tried configuring a few sites with a cert and
discovered that its not all that simple, I was under the assumption that its
much like standard http on port 80 where it allows you to share the same IP
by specifying a host headers with https on port 443 however it is ... more >>
Stop logging of localhost
Posted by Jeff at 11/16/2005 11:10:30 AM
Can someone tell me how to stop logging localhost or particular IP addresses
in IIS 5.1? Also, anyway way to block IP addresses with IIS 5.1 short of the
Windows Firewall or a hardware firewall? Thx!
... more >>
xmlrpc question
Posted by FD at 11/16/2005 9:05:33 AM
Hi,
I read the post and response about xmlrpc hanging. I do not have that
problem but I have seen this message in my IIS 6.0 logs. Since the IP
addresses are getting a 404 error, I think I am ok. Since I am new to IIS, I
just want to make sure a virus has not infected our webserver. Thanks... more >>
digest authentication box greyed out
Posted by John at 11/16/2005 8:30:10 AM
Hi,
I am running Windows 2000 server with IIS 5.0 SP4,
which is hosting a website which requires digest authentication.
Recently the website has stopped working. I have noticed that
the "Digest Authentication" box is now greyed out. I am able
to browse active directory from the server and hav... more >>
secure and non-secure access to one site
Posted by bill tie at 11/16/2005 12:47:03 AM
The machine is Win2k3 SP1 with IIS 6.0. Suppose I have a website
siteName.companyName.com.
Internal clients should be able to access the website as follows:
http:/siteName/
External clients should access the website using SSL as follows:
https:/siteName.companyName.com
I believe I ne... more >>
metabase explorer and ssl diagnostics tools
Posted by bill tie at 11/15/2005 3:21:02 PM
Can anybody point me to Metabase Explorer and SSL Diagnostics versions that
recognize SSL host headers in IIS 6.0?
Thank you.
... more >>
Accessing remote files through IIS and web applications
Posted by itmanager at 11/15/2005 1:11:06 PM
We have an ASP.NET application that attempts to access an Excel file located
on a remote file server. This always results in a logon error, but if we move
the Excel file locally to the IIS server, we are able to access it without a
problem.
We are running on an IIS 6/Windows 2003 server and... more >>
IIS CRL publishing
Posted by Magnus MÃ¥rtensson at 11/15/2005 7:08:10 AM
Hi!
Here's a good one for all ya'll IIS experts out there!
How is the CRL distributed from the CA to the PKI-clients in IIS? Push?
Pull? Combination?
Is this possible to configure in your PKI solution?
/Magnus - NoopMan ;~)
... more >>
What do these Account Names mean?
Posted by SMAccount NO[at]SPAM gmail.com at 11/14/2005 3:28:40 PM
There are a number of users listed in the Permissions List for a
Folder on my Web Host (names changed slightly to protect the innocent).
Can anyone tell me where these are defined? For instance, what is
OWS?
Administrator -- RWXDPO
SYSTEM -- RWXDPO
NETWORK -- RX
NETWORK SERVICE -- RX
IU... more >>
why do .asp files prompt for login but .htm files do not?
Posted by mushu at 11/14/2005 1:48:09 PM
IIS 5.0 in a domain. IIS has Basic & Integrated selected, NOT
anonymous. All users have I.E. browser. All users are members of the
same domain. IIS Basic Auth MMC section has the correct domain entered.
There is no global.asa file in the directory. All links in the .asp
page have been validated ... more >>
Wildcard SSL possible at domain level?
Posted by duncan.mason NO[at]SPAM gmail.com at 11/14/2005 7:37:13 AM
Hi All,
I am trying to serve content over SSL for multiple sites on a single
server machine. I have read a lot about using wildcard certificates for
IIS to cover several subdomains like....
sub1.domain.com
sub2.domain.com etc
my problem is that the 2 websites are not on the same domain n... more >>
xmlrpc.php causing system hang?
Posted by Mark Lordi at 11/14/2005 7:15:37 AM
Hello everyone! first time posting here. I have a windows 2000 server
running iis 5. I am having this weird problem of late (started around
11/7/2005). I noticed in my event viewer under system that I have been
getting these timeout messages from a file called xmlrpc.php. Now the
weird thing is ... more >>
Authenticate against AD
Posted by Bud Belles at 11/13/2005 7:30:59 AM
I'm running Windows Server 2003. My web pages are build using ASP (not
..NET).
Some of my pages show a list of Word documents that a viewer can download.
Each
page shows those documents that the "owner" of the page wants to be
available for
downloading. Currently, I get the files emailed to m... more >>
IUSR & IWAM account
Posted by newbie at 11/12/2005 8:42:01 PM
Hi,
I updated the metabase for the userid and password of both the above account
and the web site is running fine. But now I cant seems to find any
logon/logoff events of these accounts in the security log although I have set
the authenication methods for IIS5.0 to anonymous access.
Am ... more >>
Multiple SSL certs on a single server IIS 6.0
Posted by Fred at 11/12/2005 1:01:03 AM
Hi
We have a server hosting a number of websites accessed via SSL using
name1.domain.com and this has been working fine. We now want to create a
second series of websites but with different branding but hosted on the same
server. The IP is the same but the URL is name2.domain.com.
We h... more >>
repost: multiple SSL certs and NLB
Posted by z at 11/11/2005 2:54:22 PM
i'm sorry for the repost, but i thought i should repost this under a
correct, supported account this time...
---
I've so far failed to find the correct google search or MS site search
phrase to coax the answer to this one to the top of a results page so i
wonder if i can ask for a bit of gui... more >>
SSL on IIS6 Performance Problems
Posted by John at 11/10/2005 4:58:01 PM
I have Windows 2003 Server Standard Edition (fully updated) with IIS 6.0
installed on an IBM eSeries single Xeon 2.8Ghz System with 1GB RAM and a
gigabit NIC. All the hard drives are 15K RPM Ultra 320s. We are moving our
website from an old (NT 4.0 w IIS x) to this new system. When SSL is
... more >>
SSL Login web page
Posted by Big Cone at 11/10/2005 2:37:50 PM
Hiya
I'm having troup logging into the SSL site from the no-SSL site.
The active server pages work right, but the form does not want to post if
the action is the secure site. It will post if the action is the non-scure
site.
What the heck?
... more >>
How to enable SSL on IIS 6.0
Posted by Che at 11/10/2005 1:20:12 PM
I am trying to setup a Windows 2003 workgroup server for Citrix Presentation
Server v4.0. I have installed "Certificate Service" and I am wondering how I
can request a server certificate and use the same server to authorized the
certificate?
Thanks
Che... more >>
deny a user the ability to create a virtual directory, but still view the IIS MMC?
Posted by jeffdrobinson NO[at]SPAM gmail.com at 11/10/2005 9:17:47 AM
is there a way to deny certain users the ability to use the Virtual
Directory Creation Wizard?
... more >>
IIS 6 Metabase Auditing performance ?
Posted by Rene at 11/10/2005 6:06:05 AM
Hi out there!
Are there any known problems with performance when you activate the IIS 6
Metabase Auditing ?
Thanks for infos
Regards.
R.... more >>
|