all groups > iis security > january 2007
ms odbc text driver error
Posted by JC at 1/31/2007 9:12:07 PM
Importing csv file using vs.net 2.0.
I keep getting errors when I try and access a file using the odbc text
driver. If I set the virtual directory to run under an admin account i can
access the file. If I set the vd to run under the iuser account I get the
following error.
Microsoft OLE ... more >>
Win2K3 Integrated Authenticaton and file download issue?
Posted by Dan Marsden at 1/31/2007 3:15:01 PM
We have an issue on a Win2k3 Virtual Server sitting on a VMWARE box with
Integrated Authentication.
When Integrated Auth is turned on, sometime (not always!) large files get a
time-out message when you try to download them. In fact, it even happens
with some smaller files (but inconsistent... more >>
Issue with FTP and IE7
Posted by Santa at 1/31/2007 9:36:01 AM
HI Guys
When i try to login to my FTP (IIS6.0) server from the user that i have
created in the local server it is not taking me by default into the ftp
directory that i have created from the same name as the user that i try to
login.
With IE6 i used to login to the users home directories f... more >>
SSL not working
Posted by Tommy Forsman at 1/31/2007 9:23:39 AM
Hi
Have tried to enable SSL on a SBS2003 but when I require SSL the website
stops to respond.
Have installed CA services
Have created Certificate request
Have "downloaded" the pending request
Have appended the certificate to the default website
But when I put a checkmark in Require Sec... more >>
Root Directory and Write Permissions
Posted by iporter at 1/31/2007 9:19:21 AM
I'm vaguely aware that for security reasons, you shouldn't set write
permissions to your root web directory. However, I have a ASP-based
CMS that is designed to write html files and folders to the root
directory.
What are the risks?
Thanks,
Iain
... more >>
Unable to authenticate via kerberos to IIS site accepting client c
Posted by jacorona at 1/31/2007 2:27:00 AM
Hello all,
After spending a few hours searching the web, I post this message to this
newsgroup just in case what seems to me an strange behaviour could be due to
IIS.
I'm trying to access a web service hosted in an IIS site configured to
accept both "Integrated Windows authentication" ... more >>
IUSR ACCOUNT PROBLEMS
Posted by Jose Perez | at 1/30/2007 9:43:00 AM
I hope someone can give me a had. Someone in my maitenece group has changed
the password to this IUSR Account. This account is used for anonomus access.
How can a restor this account to it's original state, just as a quick fix I
created a new account and I am entering the password manually ... more >>
Cert not exportable
Posted by Mary Rafferty at 1/29/2007 7:01:43 PM
We have a copy of the original CSR. We have the Cert from Verisign. We
have a PXF file for this. But the associated password is lost. The cert
was imported into the current IIS6 site and that horrible default of the key
not being exportable has left us with a bit of a problem. We need to... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Help!! -- SSL Configuration
Posted by segis bata at 1/29/2007 5:43:57 PM
Hello all...
I'm writing you because I want to configure an SSL site. I already added the
certificate (filename.cer) to IIS (6.0 on Win2003) but I want to know how to
assign certain folders to the https site. (for example: The "regular" site
is at C:\IPub\Wroot\MySite; I want the files in t... more >>
set httpcontext and still use anonymous auth, demo site
Posted by Dan Brinkmann at 1/29/2007 12:53:01 PM
We are trying to setup a demo of our software on the internet and would like
to avoid having a user login. Our application normally relies on Integrated
Auth to determine the current user as much of the interface is determined
based on who the user is and what rights they have. Our demo site... more >>
.net application cannot access metabase.xml iis6
Posted by Tessa at 1/29/2007 8:22:20 AM
Hi,
I have to modify an existing .net windows application that directly edits
the IIS6 metabase.
(I don't have the option of deciding to use ADSI/WMI in a Script because
it's an existing application).
It's been working fine for a long time up to now on our test servers and our
customers... more >>
SMTP Relay Problem
Posted by Help Needed at 1/27/2007 8:37:01 AM
Hi,
I am getting error while using SMTP Relay, the error is
550 5.7.1 Unable to relay for prasadagv@gmail.com.
We have Windows 2003 OS used to host our web site (a small business site
developed in asp.net). We are using 'SMTP Virtual Server' and 'POP3 Service'
components of Windows 20... more >>
access from internet/intranet
Posted by R.Demandt at 1/27/2007 4:54:00 AM
I have a wesite running that can be access both from internet or intranet.
There are two directory's in the website, now I want to limited acces to one
of the directory's to people in my intranet. How can I do this?
Thanks for any response,
R.Demandt... more >>
deny access to folders but dont want logon prompt
Posted by Spechty at 1/26/2007 11:46:04 AM
I am setting up an intranet site. I am using Frontpage and have the page
published to an internal server.
On the hard disk I have set NTFS permissions to the folders where I have
certain pages and info. When denied users access the link to the folder the
page is in, they are given a log o... more >>
IUSR_ and IWAM_ with admin privileges
Posted by Nicee at 1/26/2007 9:12:00 AM
An application has been purchased that requires the IUSR_ and IWAM_ accounts
be placed in the local administrators group in order for the application to
work.
Could you please detail the security risks?... more >>
Windows 2003 server and web sharing
Posted by John at 1/25/2007 11:47:19 PM
I have a few questions about web sharing.
1. When you enable web sharing of a folder, what port does the user need to
access the shared folder remotely?
2. If I set the security up in IIS for that folder, will it change the local
intranet security for the local users?
3. In the web sharin... more >>
How secure is Digest Mode compared to Integrated Authentication
Posted by K12-Jammer at 1/25/2007 12:26:03 PM
While researching authentication on IIS I saw there were 3 options for
authenication: Basic, Digest and Integrated Authentication.
My requirements are that this works both on the Intranet and Internet. I
would also prefer that the user enter only his short username and password
(eg bsmith... more >>
HTTP 401.2: Unauthorized: can't access page
Posted by ben at 1/25/2007 9:21:35 AM
Hi,
i have iis 5.1 on windows xp sp2.
I created several asp.net applications for our intranet, using the windows
integrated authentifiaction method, because those applications are only for
internal users.
Now recently, i made an application which is accessible by any anonymous
user. I c... more >>
Custom 401, basic authentication, ISAPI problem
Posted by javawzl at 1/24/2007 8:41:02 PM
We have a custom ISAPI for authentication and authorization running on 2003
server. Basic Authentication is setup. A custom 401 has been setup on the
site. When we attempt to access the site we are prompted for
username/password. If we choose to CANCEL at this point the 401 is shown up
to 2,... more >>
Cannot get Cert authentication with directory service mapping to work
Posted by C Low at 1/24/2007 12:47:12 PM
Hi
I've setup an IIS 6 server (on Win2K3 server) to do 2-way SSL using
cert-based authentication with smart cards.
On the IIS web site, I have these settings:
* Anonymous access - disabled
* Integrated Windows authentication -- enabled
* Require client certs - enabled
* Client certific... more >>
URLscan 2.5 does not scan for CGI parameters
Posted by cilmberg NO[at]SPAM opentext.com at 1/24/2007 3:03:12 AM
Hi,
I have IIS 6 on windows 2003sp1 with urlscan 2.5 running a cgi
application.
I want to have certain characters to be removed from the whole url
including cgi parameters. Unfortunately the urlscan only checks till
the '?' parameter which says that the cgi parameters are following.
Unfort... more >>
About .NET and Server too Busy Error
Posted by io.com NO[at]SPAM newsgroup.nospam at 1/23/2007 5:42:22 PM
Hi,
i have a web application make in .NET 1.1 SP1 and sometime the customers
telle me that this error occurred :
<body bgcolor="white">
<span><H1>Server Error in '/MyApp' Application.<hr width=100%
size=1 color=silver></H1>
<h2> <i>Server Too Bus... more >>
Integrated Windows Authentication
Posted by Richard C at 1/23/2007 3:28:12 AM
Hi,
I have configured a website within IIS6 on Windows Server 2003 but am
having issues with IIS Integrated Windows Authentication.
Each time I try and access a test page in the root of the website I am
being prompted for the username, password and domain. After 3
unsuccessful tries I am p... more >>
Kerberos security on Windows 2003 using Sharepoing 2007
Posted by Nobody at 1/20/2007 9:40:29 PM
Hello,
I spend last few days trying to setup excel services to connect to SQL
Server Analysis Services on different machine using Kerberos without any
luck, so I would really appreaciate any help I could get here.
Few questions I have are:
I have IIS on machine MyMachine1 but I created web... more >>
Intranet security question
Posted by Rob at 1/20/2007 6:19:00 AM
Hi,
I have 2 websites on a IIS machine. one of them is open to the public and
another one should be only accessable from inside the network (LAN). What
has to be done in order to secure it, so peolpe from outside wont be able to
see the Intranet website.
Thanks a lot for any comment. Rob... more >>
Forcing Single w3wp Identity
Posted by Tony Proctor at 1/19/2007 9:02:44 PM
Is it possible to force a w3wp process to always run under a specific
non-admin account when users are authenticated by different means?
What I have is two virtual directories: one with Windows authentication,
supporting a minimal set of internal Windows accounts, and one using
Anonymous authe... more >>
401.1 error reported by an anonymous user but anonymous access is allowed and no other access problems have been reported
Posted by ssharma at 1/18/2007 5:37:50 PM
Hello,
I have a website set up on a WIndows 2003 Server, IIS6.
I have one (anonymous) user browsing to our website and getting
prompted for a username and password and then getting the http 401.1
error.
This isn't happening with anyone else that I know of....the website has
been accessed... more >>
IIS Default Domain?
Posted by Justin Rich at 1/18/2007 12:39:23 PM
I have a server that has an internal domain and has an internet domain,
which do not match.
right now in order to get people to login i have to do Internaldomain\user
as the username otherwise it assume ExternalDomain\users
how do i get it to assume the internal domain?
the website secu... more >>
Integrated Windows Authentication and Windows XP for ASP.NET Application
Posted by aartinawanishah NO[at]SPAM gmail.com at 1/18/2007 6:32:08 AM
We are running an IIS 5.1 on a Windows 2000 Server using Integrated
Windows Authentication to connect to our
ASP.NET intranet application.
All users are able to connect without having to enter their login name
and password. Only users running IE on a Windows XP platform (both with
and without... more >>
Application Problem on Windows 2003 Server
Posted by noisefree at 1/17/2007 7:21:48 AM
Hello,
I have a problem on an application I am developing:
This C# Windows Application calls a C# Web Service, which it uses the
SourceSafeTypeLib DLL to interact with Visual Source Safe 6.
The problem comes out when I call the VSS method "Get(ref string Local,
int flags)", which should g... more >>
Directory Security configuration is grey for FTP sites in Vista Business RTM's IIS 6
Posted by Yannick Berker at 1/13/2007 3:35:54 PM
Hi,
i already gave nearly all the information in the topic, so I'll make it
short: I want to restrict access to an FTP site by IP address, but I can't,
the configuration buttons are greyed out.
It looks like this (in German):
http://berker.campus.ecp.fr/directory-security.jpg
I also can'... more >>
Simple Authinitication
Posted by Tango T at 1/13/2007 8:00:32 AM
Stand alone Windows 2003 Server Standard W IIS6.
I have a website that works great using anonymous authentication. I would
like to lock it down so a user has to enter a local user account, username
and PW. If I uncheck Anonymous Authentication and give the local user
rights to the folde... more >>
Don't think your computer has errors
Posted by eqpsdidunywe NO[at]SPAM yahoo.com at 1/12/2007 4:53:01 AM
It's a known fact that over 93.7% of computers that are over 30 days
old are infected with spyware and adware. Such software is rarely
accompanied by an uninstall utility and even when it is it almost
always leaves broken Windows Registry errors behind it.
Even if you bought a spyware remover to... more >>
Internal Website - IIS Error
Posted by Guido at 1/10/2007 12:12:01 AM
On a new Windows SBS 2003 we have created the website in IIS.
If we try to access the website externally we get the following error:
HTTP Error 403.6 - Forbidden: IP address of the client has been rejected.
Internet Information Services (IIS)
If we try to access the website fron inside the n... more >>
Trouble Accessing page specified by AuthExpiredURL Metabase entry
Posted by Kenneth Baltrinic at 1/5/2007 3:58:31 PM
I am a lead .Net developer on a large government web application running on
IIS 6.0/Win 2003 Server. We are using basic authentication over SSL
authenticating against an active directory. There is a new mandate that we
implement a password change function that allows users with expired
pas... more >>
runtime error '800a01fb'
Posted by TAO at 1/3/2007 3:16:00 AM
The hosting server is running Win2003 , my code is reading from a registered
DLL file on the same server :
The following is where the code stop...
30 Dim TransVal, varPaymentID, varPaymentPage, varErrorMsg, varRawResponse
31
32 TransVal = MyObj.PerformTransaction
33 varRawResponse = MyO... more >>
Strange Security Problem
Posted by Slant at 1/2/2007 4:23:42 PM
Good day!
I'm an Apache user for the most part and am trying to setup an IIS
server on the same system (using port 8000 to resolve obvious
conflicts) for cross-server testing since one of my prod servers is an
IIS server.
I've had Apache/PHP/MySQL setup for about a year now on my local
sys... more >>
IIS Browsing
Posted by Andrea :-) at 1/1/2007 11:10:19 PM
Hello
i've a great problem with IIS (5 or 6).
I have all my website in a Subfolder of C.
If I Place on a WebSite (casual) an ASP tools to browsing directory, I can
"navigate" the other site and all the server's disk structure (Windows
directory included).
My Web work with IIS Users.(IUSR)
... more >>
No longer can edit changes to my web server using FrontPage 2003
Posted by ricpedtech at 1/1/2007 8:59:00 AM
I can no longer edit my web pages by opening my website in a browser on my
laptop or any remote computer, logging on to my web server (2003 Standard
OS) and edit using FrontPage.
By opening FrontPage, I would be asked for my server's username and
password. I can still edit my webpage, bu... more >>
|