Groups | Blog | Home
all groups > iis security > may 2005 >

iis security : total newb can't access susadmin page


Evan
5/24/2005 12:49:30 PM
as stated, i am a complete newb to AD and IIS. but, my boss has asked me to
look into bypassing windows updates and using a push technology. so, i've
got this w2k3 server test box i just built and installed IIS so i could
install SUS. everthing is hunky-dory except that when i go to the susadmin
page, i get a 'not authorized to view' page. at the bottom of the page it
tells me to open inetmgr and use help to search for 'access control', which
i've done. well, it's a huge list. i've tried several of the things that
*looked* relevant, to no avail. i've been through most of the AD looking for
permissions to set, but i mostly don't know what i'm doing. i'm logged on
locally as the admin and anonymous login is enabled.

can anyone please advise?

thx!!

evan

Brian
5/24/2005 3:29:22 PM
Try using http://localhost/SUSAdmin instead of http://<servername>/SUSAdmin

[quoted text, click to view]
Evan
5/24/2005 4:04:42 PM
thx, brian. yes, that is the default setting and does not work. neither does
http://servername/susadmin . keep 'em coming! ;)

[quoted text, click to view]

Evan
5/25/2005 3:34:28 PM
please forgive the bump, but i'm dying here. i've checked every permission
via inetmgr and i just cannot figure out why i can't get in. i've also
posted to a coupla forums with no luck. i'll send a box of cookies to anyone
who can help me. i swear!

[quoted text, click to view]

JoesCat
5/26/2005 11:10:03 AM
First, my disclaimer - I'm having a similar problem with my SUS website, I
cannot access it anonymously, but only as an administrator. I've solved your
problem, but not my own, as I will need to get anonymous access working,
since of course not everyone who needs to pull updates is an administrator.
It all used to work, something changed recently to prevent the clients from
retrieving updates, and I've since troubleshooted it down to anonymous access.

Anyway, for you to access the SUSAdmin site, in I.S. Manager, change the
SUSAdmin website to not have anonymous checked, and select Integrated Windows
Authentication. When you are logged on locally as an administrator, you will
authenticate as an administrator when accessing the website, and you're in.

When anonymous is enabled, it trumps all other authentication options - it
tried first, and is maybe failed even before you get the chance to logon
otherwise.
--
-Joe


[quoted text, click to view]
Evan
5/26/2005 2:38:56 PM
LOL, this is great! i'm not kidding, just 5 minutes ago i got the same
answer from neowin.net. and yes, that was it. so, joe, tyvm! and even though
i got the answer somewhere else first, i will totally honor my offer for a
box of cookies. just let me know if you want 'em and i'll work it out.

thx again!

evan


[quoted text, click to view]

JoesCat
5/27/2005 5:51:03 AM
I can live without the cookies, but thanks anyway!

Even better, help someone else out sometime, and that's how it all works.
Everybody's got a piece of the puzzle, and one of my favorite saying, is no
one was born knowing all of this computer stuff.

--
-Joe


[quoted text, click to view]
AddThis Social Bookmark Button