all groups > iis security > december 2005 >
You're in the

iis security

group:

Integrated Windows Authentication - 401: Access Denied



Integrated Windows Authentication - 401: Access Denied Garth
12/21/2005 1:38:02 PM
iis security: Developing .NET application to acccess web services. In IIS, if Integrated
Windows Authentication is turned on, I get a 401: Access Denied error.
However, if I turn off Integrated Windows Authentication and turn on Basic
Authentication I am able to authenticate the user with no problem.

I am having the same problem with ASP.NET applications, unable to
authenticate the user through Windows prompt for Integrated Windows
Authentication, but Basic Authentication works fine.

This test is being run on the same machine (web server is the same machine
as the development machine).

Re: Integrated Windows Authentication - 401: Access Denied David Wang [Msft]
12/21/2005 9:47:47 PM
IIS version?

If IIS6, if you use Integrated Authentication AND your machine is in a
domain AND you customized the Application Pool Identity AND you failed to
setspn the new identity as specified by documentation, then you can see this
due to user misconfiguration.

You may also look at any double-hop situation in your application because
that can also show up as a 401 using Integrated and succeed with basic --
because Basic is less secure.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

[quoted text, click to view]

Re: Integrated Windows Authentication - 401: Access Denied Garth
12/22/2005 8:55:03 AM
Thank you for the response.

IIS is ver 5.

Machine is not in a Domain, did not customize the app. pool id. I did add
the user account to the Debugger Users group. If I turn Integrated Windows
Authentication on and debug an ASP app from within VS.NET, I am automatically
logged in and identified, no problem. If I irun the same ASP application
from a browser (outside the IDE) the Integrated Windows Authentication fails.

Very Strange.

[quoted text, click to view]
Re: Integrated Windows Authentication - 401: Access Denied Consultant
12/23/2005 10:50:03 AM
try using iis authdiag, make sure all your permissions are squared away.
usually that is a kerberos issue, check this out:

http://support.microsoft.com/default.aspx?scid=kb;en-us;215383


[quoted text, click to view]

Re: Integrated Windows Authentication - 401: Access Denied Garth
12/27/2005 2:20:42 PM
Followed steps in the article and got the expected results:

NTAuthenticationProviders : (STRING) "Negotiate,NTLM"

It has to be something simple, but haven't found it yet.


[quoted text, click to view]
Re: Integrated Windows Authentication - 401: Access Denied Consultant
12/28/2005 7:39:19 AM
did you create an spn?


[quoted text, click to view]

AddThis Social Bookmark Button