all groups > iis security > january 2006 > threads for january 15 - 21, 2006
Filter by week: 1 2 3 4 5
How to reinstall old SSL cert on a IIS installation?
Posted by nospam NO[at]SPAM nospam.sss at 1/21/2006 4:51:50 PM
I had to restore an image to my boot drive. The restore has an IIS image
before it had the IIS cert.
Is there any way to install the ssl certificate I have? I tried to create a
new pending request but I couldn't use my existing cert.
I don't have a backup of the private and public keys.
J... more >>
Use Secure Sockets Layer for a single web site
Posted by NuBee at 1/21/2006 12:36:02 PM
(1) How do I install (or require SSL) SSL on a web site?
(2) Do I have to use a certificate? If yes, can I create my own?
--
NuBee... more >>
IIS Security
Posted by RobG at 1/20/2006 12:16:03 PM
I am a local administrator on a Windows Server 2003 system (SP1) and I cannot
successfully logon to the Default Web Site. Permissions and Security for
WWWRoot lists Administrators as Full Control. What am I missing?... more >>
Wildcard SSL cert error
Posted by news.microsoft.com at 1/20/2006 9:07:24 AM
Hi
I have a problem with a wildcard SSL and I'm sure someone else must have
come across this scenario and solved it.
We have a wildcard SSL *.domain.com
I have installed the SSL and if the website is called whatever.domain.com
the client receives no errors and the SSL is established.
... more >>
IIS protocol question
Posted by Georg Bauer at 1/20/2006 7:55:02 AM
Hi there,
I use IIS6 on Server2003Standard with isapi-redirector to Tomcat 4.1.31 as
servlet-engine.
Everything works fine, ... but:
every time, I call my servlet (even local or from a client) there are three
entries in the IIS-Log, the first two of them with an error 401
Where are this erro... more >>
How do I reset ACL of C:\Inetpub\wwwroot
Posted by Gaetan at 1/20/2006 4:20:42 AM
For a long time, I experienced random problems with Microsoft IE Web Controls. Most of the
time, I managed to get the Tree View and Tab Strip to work again after they mysteriously
stopped working.
Unfortunately, IE Web Controls seems to have stopped working for good on my IIS 6.0
server. I tr... more >>
I need less IIS security to fwrite via PHP
Posted by ctrygstad at 1/19/2006 5:11:06 PM
I get denied access, where can I allow PHP to write files?
I get error messages when I try to fwrite, and I checked my php.ini
file, there is a specific line to grant access to fwrite and fopen,
does anyone know anything about this?
--
ctrygstad
--------------------------------------... more >>
Default Site & Application Pool / ASP.NET security problems
Posted by Jonathon J. Howey at 1/19/2006 1:47:05 PM
Hi,
The problem i'm seeing seems to exist only with the Default Web Site and
Default App Pool. Earlier today, we installed MS Project Server 2003, and
had Sharepoint extend the default Web Site. Since then our two ASPNET
applications running, plus WSUS, have stopped working; throwing a .N... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
authentication problem IIS6 on Win2003
Posted by Georg Bauer at 1/19/2006 1:21:02 AM
Hello!
I really hope, you can help me:
I have installed an ASP-application with exactly the same IIS-definitions on
Win-XP and it works fine!
I try to install the same ASP-application on Windows Server 2003 Standard /
IIS6
I have created 3 separate virtual directorys: for the *.asp, for ... more >>
CDOSYS - security
Posted by Rusty at 1/18/2006 1:26:02 PM
I am hosting a few websites on a win2003 server (fully patched) / IIS6. Each
site has forms that when filled out use CDOSYS to email info to users inside
the company. Everything works great.
Are there any CDOSYS vulnerabilities that a spammer could use to take
advantage of those forms to ... more >>
Remote access outside local network
Posted by d3scr1pt0r NO[at]SPAM gmail.com at 1/18/2006 5:44:43 AM
Hi, I am trying to use the remote workspace , remote access website of
our network, but it seems as it can be accesed only from inside our
local network, how can i make it work from outside?
Our outlook webmail and OMA work fine from outside.
Also a secondary website i have running on a diff... more >>
FP Site Access - User/Pass required ?
Posted by Bob at 1/17/2006 11:07:36 PM
I have a newly built Win2003 server w/IIS6. The server is standalone
and there is no AD. Users log onto client machines with credentials
that match user/pass accounts on the Win2003 machine. Everything works
fine, clients get access to shared win2003 resources as expected.
However, when I sta... more >>
Client certificate mapping question
Posted by Bob at 1/17/2006 8:09:30 PM
I have a web server running Windows 2003 with SP1. I need to use a client
certificate to control the access to a path. Under Properties -> Directory
Security -> Security Communications (Edit) of the folder, I checked Require
secure channel and Require client certificates. Then I added a mappin... more >>
keep getting massage -encrypted connection error code 8075
Posted by boxer184 at 1/17/2006 3:26:01 PM
would someone please tell my how to set my encryption higher... more >>
installing virus scanning
Posted by Bad Beagle at 1/17/2006 11:46:05 AM
Is there any ill effects of installing virus scanning on an IIS 6.0
website - is there any directories that should be excluded?
... more >>
Using Root of Drive for Home Directory of Virtual Directory
Posted by hotsdogs at 1/17/2006 9:27:02 AM
Does anyone know of a security issue of using the root of a drive, for
instance d:\, as the home directory of a virtual directory in IIS? I
am proposing doing this for purposes of Remoting to save a lot of
effort in configuring remoting objects. My company already has an
established directory ... more >>
Cookies not working on a specific computer
Posted by Padraic at 1/17/2006 3:55:04 AM
I am developing on two seperate laptops and I am posting my code to a hosting
provider. My code works perfectly on laptop1 and on the hosting provider.
The same code does not work on laptop2.
On this laptop2 I am unable to create cookies, sessions or a ticket. I know
cookies work on laptop2 ... more >>
IIS on a domain controller
Posted by Khizer at 1/17/2006 2:03:03 AM
Hi,
We have a w2003 domain controller which also has IIS ans WSUS on it. Are
there any security implications with this setup or do you think it's better
if I install IIS and WSUS on a seperate server.
Thanks
Khizer ... more >>
Can not get Security tab in folder properties to set webserver use
Posted by Steve at 1/16/2006 7:50:02 PM
I am writing an ASP page to edit a database.
Ive done it many times in the past successfully and I am using copies of
that successful code, so i wont worry about the db code or setup its fine.
i can read no problem from the db's, but if i try to edit one i get...
Microsoft OLE DB Provider for... more >>
Encryption of Credit Card files
Posted by The Poster at 1/16/2006 12:47:46 PM
G/Day Forum,
We are working on complying with the Visa/MAsterCard Payment Card Industry
Data Security Standard (PCI DSS). As part of this we need to imply the
following controls on the storage of credit card data:
to encrypt data at a folder level - that is all of the containing folders
and... more >>
Kerberos Error 4
Posted by Michael Morisoli at 1/16/2006 6:24:24 AM
I am still trying to get all my spn's configured properly and seem to be
missing something.
The details of the event log are;
"The kerberos client received a KRB_AP_ERR_MODIFIED error from the server
host/vieon-sql2k5-01.vieon.net. The target name used was
HTTP/VIEON-Sql2k5-01.vieon.net. ... more >>
Hardware Load Balanced IIS SSL Web Farm
Posted by phil.stollery NO[at]SPAM gmail.com at 1/16/2006 3:39:46 AM
I've read through all the SSL and Web Farm posts on
microsoft.public.inetserver.iis.security and non of them seem to have
the answer for me. Before I start I have read the following articles:
http://support.microsoft.com/?id=313299 (how to setup SSL on webfarms)
http://support.microsoft.com/?... more >>
How can I remove the "NTAuthenticationProviders" node in IIS 6
Posted by Michael Morisoli at 1/15/2006 3:00:06 PM
I ran the command cscript adsutil.vbs set w3svc/NTAuthenticationProviders
"Negotiate,NTLM" which is causing some services to not use Kerberos which is
causing some other problems. I would like to find out how to remove this
node as if I never ran the command.
Thanks, Mike
... more >>
|