all groups > iis security > april 2005 > threads for april 15 - 21, 2005
Filter by week: 1 2 3 4 5
SSL doesn't work
Posted by cjobes at 4/21/2005 6:23:03 PM
Hi all,
We are trying to get SSL going on one of the websites on a 2003 server. We
generated the certificate and it shows up as an option when selecting Sever
Certificate under the Security tab on the properties. Everything seems to be
fine until we try to connect to the website via https. We ... more >>
SSL Setup
Posted by Willie Bodger at 4/21/2005 3:41:16 PM
OK, here's my dilemma:
I have a site with a login script and the usual checking each time you hit a
page that requires it. We have finally gotten an SSL cert and it is
installed, but from here I am not sure of the best approach to get it
implemented. If all of the files pertaining to the area... more >>
IWA with multiple AD
Posted by Tao Tao at 4/21/2005 1:52:02 PM
Hi, have a site on IIS 6.0 configured using IWA only, becaues that site will
grab user's logon information to keep track it.
people in same AD with IIS server logon fine with no issues. people in other
AD (same domain tree, sibling domains) got 401 error. while those users in
sibling domai... more >>
Locked out of Frontpage 2002
Posted by Bryan K. Adams at 4/21/2005 9:44:35 AM
Not sure what caused this but I can get to the admin page to manage accounts
but if I try to go to the site admin I am locked out? We were running the
server in iis 5 isolation mode but we have corrected that problem and
switched back to 6. Now I can not add users back to those accounts.... more >>
Administrator 401.1 after SP1
Posted by Adam M at 4/20/2005 8:46:52 PM
I'm unable to administer to my sites with my administrator password.
Definitely SP1 related is anyone else experiencing the same type issue?
Here is the error:
You are not authorized to view this page
You do not have permission to view this directory or page using the
credentials that you... more >>
SharePoint password prompting
Posted by MichaelHensley at 4/20/2005 2:15:01 PM
I have SharePoint installed on Windows Server 2003. I'm accessing it form IE6
on a Windows XP computer logged into the same domain as the server. I'm
attempting to configure it so that I don't get prompted for a username and
password; however, nothing I do seems to work. I've tried integrated ... more >>
webdav prompts for second password
Posted by tony at 4/20/2005 11:03:12 AM
I have WebDav set up on a 2003 server and everything seems to be working
fine. When a user opens a web folder he/she gets prompted to enter
credentials and then can browse folders and subfolders that they have access
to.
The issue is that when they try to open a file like excel or word they... more >>
Why is iis6.log on an XP home machine?
Posted by provasek NO[at]SPAM sbcglobal.net at 4/20/2005 8:28:46 AM
With security concerns that back door trojans can install zombie
servers on systems, I am quite concerned that IIS components are
installed on my XP home machine, particularly with this log file
refering to "returned from France"
[4/18/2005 18:52:28] LogFile Open. [***** Search on FAIL/Message... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Service Principal Name Confusion
Posted by boarding_king at 4/20/2005 6:27:02 AM
Setting up IIS 6.0 with Kerberos authentication on sites using domain
accounts to run application pools has always caused me problems. I think this
is because I never *really* understood what an SPN was and what it was for.
Recently I did some reading and I think I've just about got it licked.... more >>
FSO exploit
Posted by Savas at 4/20/2005 12:26:02 AM
Hi,
My server was hacked over this weekend using the FSO exploit. It is sad that
by uploading one simple asp file to one website in a server, hacker can
access the whole machine, both drive C and drive D. Well I should have played
around with the IUSR permissions not allowing it to access d... more >>
401.1 - Integrated security issue on local machine only
Posted by Chris Kane at 4/19/2005 10:55:03 AM
I recently upgraded our development application server with SP1 for
Windows Server 2003 and the Web Services Enhancements 2.0 SP3. Now our
developers receive "HTTP Error 401.1 - Unauthorized: Access is denied due to
invalid credentials" when they attempt to work on their VS.Net 2003 web
... more >>
SelfSSL Utility - Not working?
Posted by Jody at 4/18/2005 1:26:05 PM
I just downloaded the SelfSSL for the IIS 6.0 resource kit and ran the
following command line: selfssl.exe /NCN=MySSL /K:1024 /Vv:7 /S:1 /P:443
I got a message that it was successful however when I go in to "Directory
Security" for my in IIS, the "View Certificate" is grayed out. I also get... more >>
Where to find the denied requests for IIS 6
Posted by Keith-Earl at 4/18/2005 7:57:25 AM
We know that the std IIS logs contain the return codes of 401, 402, etc.,
but we are interested in the URLScan logs that were present in IIS 5 and
prior with the URLScan tool was setup.
I am told not to run URLScan or IIS Lockdown on an IIS 6 box because that
functionality is baked right in... more >>
UrlScan.dll Terminating
Posted by Advertiser at 4/16/2005 11:04:16 AM
Hi there.
I've just installed UrlScan.dll and noticed that at the end of the log =
that it is terminated.
I have several questions:
1) What causes termination of a UrlScan.dll?
2) What should I do to prevent termination of UrlScan.dll in the future?
Thanks.... more >>
IIS folder structure and security.
Posted by edroszcz NO[at]SPAM gmail.com at 4/15/2005 3:26:17 PM
Hi,
Been browsing for some information about how I should organize our
Windows 2003 servers running IIS6. Whith organize I mean which folder
structure we should use and to to make it secure.
The structure I have atm looks like this:
D:\Websites
..=2E.
D:\Websites\domain1.com
D:\Website... more >>
|