all groups > iis security > may 2006 > threads for may 15 - 21, 2006
Filter by week: 1 2 3 4 5
One Domain with 2 websites and 2 SSL Certs
Posted by Word problems at 5/21/2006 6:25:01 PM
Greetings All,
I am running a Win2003 SBS Standard server. I have 2 websites running on the
server in the same domain. I have added a second IP to the server and
assigned each website an IP address. I have also created separate SSL certs
for each website and enabled port 443 for both. I hav... more >>
handling files on another server within same workgroyp !!??
Posted by Rafi at 5/21/2006 8:15:01 AM
hi,
i have a web application running under win2003 with IIS6.
there are ASP pages that access and modify local files located in
c:\folder1\folder2\*.*
every thing works fine.
I would like to move the files to another server on the same workgroup
(there is no NT domain). the IIS server a... more >>
Adding Administrator to NTFS permissions gives full control to WebDav
Posted by Tim Guy at 5/19/2006 9:54:21 PM
I have an IIS 6.0 server which is running Webfolders/WebDav
If the administrator has full control to a Webfolder then ANY user that is
part of the domain can logon to that virtual folder where they dont have
NTFS permissions to it.
Other IIS servers on the same domain dont have this proble... more >>
Still asking for authentication
Posted by mike.baranski NO[at]SPAM gmail.com at 5/19/2006 1:29:16 PM
I setup a website which should have anon access.
Under the IIS manager, I clicked the anonymous access checkbox.
I restarted the webserver.
It still asks for a password and username.
I double checked the user account for anon access, and verified the
passwords match.
Stil asks for un... more >>
XP FIREWALL ERROR "Due to an unidentified problem. windows cannot
Posted by netprophet at 5/19/2006 11:02:02 AM
I have posted this in the IIS section which may indeed be the wrong place !
I have XP Professional SP2 and during installing and messinga round with IIS
my Firewall stop working and cannot be displayed and therefore activated.
The error says " "Due to an unidentified problem. windows cannot ... more >>
fileshare on my website
Posted by Nigel.UK. at 5/19/2006 1:21:02 AM
I am running wsbs2003sp1 on one machine and w2003sp1 and iis on my web
server. My website is visible on the www but clients cannot open pdf
documents, which i can open in my own browser.
apparently ipnat.sys is running on the wsbs machine and windows firewall on
the web server. I have tried o... more >>
<customErrors> confusion
Posted by Jayyde at 5/18/2006 5:11:37 PM
New to this so please bear with me...
I set up the:
<customErrors mode="On" defaultRedirect="~/Unavailable.aspx">
</customErrors>
And what it'll do is redirect to the Unavailable.aspx page, but then bring
up ASP errors saying how it can't display what's going on and in order for
it... more >>
Certificate Services Web Enrollment Support not working
Posted by msteinhoff at 5/18/2006 2:48:14 PM
I have installed Certificate Services and Certificate Services Web
Enrollment Support. My problem stems from the fact that when I go to
http://servername/cersrv I get a 404 Page cannot be found error. This
occurs on the server and from a desktop.
OS: w2k3
IIS 6.0
I am trying to get th... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
a new idea to prevent DoS attacks
Posted by Eng.Rana NO[at]SPAM gmail.com at 5/18/2006 1:29:16 AM
Dear ALL,
i was wondering if there exists any plugins or filters for IIS that
will allow me to limit the number of requests from a specifi IP
address.
or to automatically decrease the number of requests achieved from a
single clients that we doubt that he is trying to carry a DoS attack
due ... more >>
Dumb basic authentication and SSL question
Posted by Anthony Yates at 5/17/2006 6:10:53 PM
I have a web directory protected by SSL and basic authentication. It works
fine. The user is prompted to authenticate before the page is displayed.
It bothers me that there is no SSL padlock shown on the page during the
basic authentication. I am guessing the logon is encrypted anyway, but I'd ... more >>
Kerberos timout with IIS6, ASP.Net and SQLServer
Posted by roarfred NO[at]SPAM gmail.com at 5/17/2006 1:34:15 PM
I've been struggling with a problem for the last two months that are
almost driving me nuts...
We have a traditional ASP.Net 1.1 web site accessing a SQL2000 database
using delegation and a trusted connection. I have seen many posts
regarding this setup, and we had quite some trouble getting i... more >>
What dictates whether the LOGON_USER Server Variable is sent?
Posted by nickbdavies NO[at]SPAM gmail.com at 5/17/2006 7:12:19 AM
Hi
I'm using IIS 5.1 and I am trying to gain an understanding of what
dictates whether a client sends logon credentials, in order for the
Server Variable LOGON_USER to be accessible (i.e. contain useful info)?
The current setup I'm working with is as follows ...
There are ASP pages st... more >>
IIS6 security problem
Posted by LT_Hassan at 5/17/2006 4:25:10 AM
We have a little situation here:
We have two servers - one web server and another fileserver. We need to
expose some files located on the fileserver to users, but the file
server itself is not exposed to the internet. So we created a virtual
directory on our website and mapped it to the required... more >>
IWA not working
Posted by Ishmealm at 5/16/2006 8:07:03 AM
I recently upgraded to IIS 6. In the past we haven't used Intergrated
Windows Authenication, but I thought that it would be nice to start using
that instead of Basic Authenication w\ SSL. For some reason it doesn't work.
I get prompted for a username\password even when I use IE (v6 SP2) whe... more >>
Issuing a certificate
Posted by Zart the Artist at 5/16/2006 5:51:03 AM
I have set up a Standalone CA on a DC with W2k3 (test lab)
I have created a new certificate that is pending autorization from a CA.
I am trying to use this pending request with my CA and I am having
difficulty with this process.
I have read the doco and have learned that a web interface on my C... more >>
SSL certificates without AD
Posted by Frederik Vanderhaeghe at 5/16/2006 12:00:00 AM
Hi,
Is it possible to give user certificates to users without having a AD, we
are using a member server.
If it is possible, how?
Fré
... more >>
Service principal name (SPN) / Active Directory Problem
Posted by RCarbol at 5/15/2006 2:53:02 PM
I'm having problems getting a web application working -- it's throwing a 403
error.
I ran AuthDiag to determine what was wrong, and it's giving me the message:
Service principal name (SPN) for user 'DOMAIN\MACHINE_asp' not found in
Active Directory
Is there something I can run (preferab... more >>
HTTP 501 - Not Implemented
Posted by Garth at 5/15/2006 8:40:02 AM
I am using the HTTP PUT command to upload images to IIS server. Same code
uploading to IIS 5.0 works great, uploading to IIS 6.0 throws error "(501)
Not Implemented". This error code is confirmed in the IIS log file.
Write properties are enabled on the web folder, Read Only property is
di... more >>
HTTPS : Secured and non secured item with absolute path
Posted by trihanhcie NO[at]SPAM gmail.com at 5/15/2006 5:13:25 AM
Hi,
I have a <img src = "http:// ..."> which needs to be put in a secured
page. For example on amazon when the confirmation page is displayed...
The problem is that it's a secured page (https) and my tag is an
absolute path... It looks like it's the problem because the tag is not
secured. Wha... more >>
|