all groups > iis security > march 2008
Allow upload of app_* directories through WebDAV
Posted by Heinrich Moser at 3/31/2008 5:49:02 PM
Hi!
We are using WebDAV to publish our ASP.NET applications to an IIS 6.0
server (W2k3). Everything works fine so far (including uploading aspx
files, after we discovered that "script source access" needs to be
activated), except for uploading App_* directories (App_Data,
App_LocalResources, ... more >>
Kerberos and IIS6 issues
Posted by trm1995 at 3/31/2008 5:06:39 PM
I'm seeing a problem in trying to get a web application to authenticate
cleanly and Not getting a lot of targeted errors that provide sufficient info
to troubleshoot effectively, so here I am.
Environment:
all affected systems are in a single domain run by a Win 2k3R2 server,
relatively up... more >>
Still expired password changing using IISADMPWD with IIS6
Posted by Vic at 3/28/2008 9:24:05 AM
Configured IIS6 on W2003 using Microsoft document :
- created iisadmpwd virtual directory
- registered iispwdchg.dll
- configured metabase PasswordChangeFlags
Users can manually get page aexp2b.asp but when a user with an expired
password tries to acess the web site he isn't redirected to th... more >>
Login Loop
Posted by BigSam at 3/27/2008 1:46:01 PM
On our web server we have a virtual web site used to validate processes prior
to moving them into actual production. One of the steps we've taken is to
require a user ID & password. We are able to login fine, but after a page or
2 we are challenged again for the user ID & password. My develope... more >>
How to Change Connection Credentials
Posted by Ross Culver at 3/27/2008 9:16:53 AM
On our internal IIS server we have a SharePoint site as well as various
other ASP.net sites. One site is used for ClickOnce deployment of a variety
of Windows applications.
Recently when trying to publish a ClickOnce app to the server, I was
ultimately forced to use the server/administrato... more >>
Run IIS
Posted by Don Jones at 3/27/2008 8:31:02 AM
Is it possible to run the IIS services as a user other than the local system
account? If so, what rights does the user need?
Windows Server 2003 w/SP2 IIS 6.0
Thanks.
... more >>
Anonymous and integrated authentication for Web service
Posted by iamahulk at 3/26/2008 9:36:06 AM
Is it possible using IIS(version 6) to have both Anonymous and integrated
authentication for a web service?
By this I mean can it do intergrated authentication when the credentials
exist, but if they don't allow an anonymous connection? (For a single URL)
... more >>
ftproot permissions
Posted by StevieD at 3/26/2008 3:16:04 AM
Our Setup: IIS 5.0 FTP site is pointing to the home directory of
inetpub\ftproot. Within here, we have separate folders setup for each
customer. The permissions on these folders are restricted to administrators
and the local user account (customer account), which has read access. So
when... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
(IIS) problems with virtual directory
Posted by Paulo Canavezi at 3/20/2008 12:39:20 PM
Good Afternoon!
I am having problems with the display of files in a virtual directory.
At my "server1" I created a logical mapping on IIS appoint to a image
directory on "server2".
At "server1" I can browser the files on "server2", but if I'm using
Internet explorer, I got this error:
####... more >>
access issue
Posted by Greg M at 3/20/2008 9:04:02 AM
Last night, I updated an application running on IIS6 to use trusted logins.
If the user go to \\servername\app
all is fine and the app opens
If the user goes to the ip address of the server then the app
(i.e \\10.10.10.10\app), it prompts the user for a login (generic windows
userna... more >>
Digest does not work when integraded is turned on. ONLY on non-AD machines.
Posted by Chris Auer at 3/20/2008 9:01:16 AM
When I turn on digest and Integraded then log in on a machine that is
in my domain (not using domain name) it works fine. This works in FF
and IE 6 & 7. But when I do the same thing from a machine that is not
in my domain in a remote location Digest fails. I have to include my
domain name for it... more >>
Integrated Windows Authentication
Posted by vx at 3/20/2008 12:15:00 AM
The user and the server running IIS are members of, or are trusted by, the
same domain.
And IIS configed to use Integrated Windows Authentication.
Does Internet Explorer prompt the user for credentials (user name and
password) ,and use NTLM Authentication, When
user access the website usin... more >>
Getting up to speed on NTLMv2 programming ASAP?
Posted by PeteOlcott at 3/18/2008 10:33:21 AM
What is the fastest way to get up to speed on NTLPv2 programming in
either Visual C++ or Managed C++?... more >>
Discovering filenames when 'Directory browsing' disabled
Posted by Sean S at 3/17/2008 7:44:00 PM
Hi all,
How hard (or easy) is it for a site visitor to discover the filenames of
files in directory that has 'Directory browsing' disabled?
I have a contractor who is planning to do this with some files on our site
and need some advice.
Sean.... more >>
Permissions on website folders
Posted by Jeff at 3/17/2008 6:46:01 AM
Hello, I have my webpages in a folder called "company.com" under
Inetpub/wwwroot. I'm having some trouble configuring the permissions on the
folder. Does everyone need atleast read access to this folder in order to
access the website? I took the read permissions off for everyone and users
st... more >>
Problem with https and IE (and safari) on Mac os
Posted by Harsh Trivedi at 3/17/2008 5:31:19 AM
Hi,
I have configured SSL to my site, and I am able to open it Ok on Win
based browser, but not on MAC system.
-----------------------------------
My Site Developed in ASP.NET 2.0, and ported on IIS 6.0.
-----------------------------------
I got this error,
"Cannot find server or DNS Erro... more >>
Renamed AD user accounts and Integrated Windows authentication in IIS 6.0?
Posted by Usenet User at 3/14/2008 8:30:36 PM
Here is the issue: some user accounts were renamed in our Windows
2003-based Active Directory. These users successfully log in with
their new user IDs into the domain. However, when they try to access
our IIS 6.0-based ASP.NET applications that use Integrated Windows
Authentication, the IIS stil... more >>
source of Failure Audits is Default Web Site
Posted by G at 3/14/2008 2:26:39 PM
I've inherited an apparently unmaintained environment. I notice that about
half of my Security events on my domain controller SVR2 are:
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 3/14/2008
Time: 1:44:25 PM
User: NT AUTHORITY\SYSTEM
... more >>
Problem after setting password policy
Posted by Bob at 3/14/2008 12:18:36 PM
Hi All,
I recently changed the password policy on our server by going to
"administrative tools" -> "domain security policy"
I have now enabled "password must meet complexity requirements".
If I set a users account to "user must change password at next logon" then
the use is able to chan... more >>
Installing a renewed SSL certificate without creating a new key pair
Posted by Saqib Ali at 3/14/2008 10:00:09 AM
Hello,
How can I install a "renewed" SSL certificate on a IIS server without
going through the process of regeneration of the key pair?
saqib
http://doctrina.wordpress.com/... more >>
How Add specific extention in Mime Type in IIS 6.0
Posted by Dima at 3/13/2008 6:16:01 AM
Hi anybody!
I need help in IIS 6.0, i have application wich called MATHEMATICA 4.0 and
extentions of files is called .nb , i am trying to add in IIS 6.0 in Mime
Type this kind of extention but i don't know what type of Mime Type to write?
Thanks a lot... more >>
IIS Kerberos Authentication issue;
Posted by alwynpereira@gmail.com at 3/13/2008 6:00:06 AM
Hello
I have two web applications running in different app pools. First one
[WA1] runs in the default pool [P1-LocalService], and the other [WA2]
in a seperate pool [P2] with identify of a domain account: DA1.
Window integrated authentication is enabled for both;
I access the url using h... more >>
IIS7 Directory Browsing
Posted by Jurjen de Groot at 3/10/2008 5:49:49 PM
It's probably a simple question for you Vista / IIS7 users out there.
I'd like to enable Directory Browsing (and possibly Static content) on my
dev-box, it's just for development on my local machine but I can't figure
how to do it, IIS7 user interface is quite different from IIS6 and I can't ... more >>
CSR - Won't process pending request
Posted by rileymartin at 3/10/2008 3:35:01 PM
Hi,
I'm migrating Exchange to new hardware and after generating a new CSR
and downloading our new cert, it won't process. I generated the request
using the IIS MMC and I'm trying to process the pending request also in IIS.
When I browse to the cert file and click it says the followin... more >>
both Windows and Custom Authentication for Web Services
Posted by Daniel P. at 3/10/2008 10:59:03 AM
I expose a collection of services using Win 2003 server and web services. I
need to support both Windows authentication for internal user and custom for
outside users.
I configure IIS to use both Anonymous access and Integrated Windows
authentication.
WSLogon logon = new WSLogon();
logo... more >>
how to place the website in a windows 2003 network
Posted by airandclouds at 3/6/2008 12:18:56 AM
hi all
i have been trying to setup a website developed using ASP.Net at client machine in Windows Server 2003 NEtwork. Now i want to use it as intranet but getting lot of problems.
From http://www.developmentnow.com/g/91_2007_1_0_0_0/inetserver-iis-security.htm
Posted via DevelopmentNow.com Group... more >>
login for 127.0.0.1
Posted by skynet at 3/5/2008 12:38:58 PM
I've Windows XP Pro and IIS installed.
When I type http://127.0.0.1 in the address balk of IE, a login + password
is asked. Which login + password I have to use? In the configuration of IIS,
'anonymous access' is activated (even if I de-activate 'anonymous access',
it doesn't work).
When I... more >>
Integrated Authentication - Manual Authentication Popup
Posted by Chris Hoare at 3/5/2008 3:07:12 AM
Hello,
I have a strange intermittant problem.
There are two web servers configured to load ballance behind an F5 load
ballancer. Each of the web servers has a .Net application running in IIS 6 on
Windows 2003. The site is setup to use integrated authentication only and
domain users are ... more >>
Server certificate - CSR generation
Posted by E. Kwong at 3/4/2008 4:06:02 PM
Currently we have a cert in place for our web server (Win 2003 IIS 6). But
about a month from now we are going to change our web address / URL.
Is it possible to generate a CSR for the new URL and submit to the CA in
advance? My impression is that the current cert has to be removed first... more >>
Basic security question
Posted by LP at 3/4/2008 9:39:40 AM
Hi there,
I'm going to be using (anonymous) impersonation on my web site so everything
will run under IUSR. I'm a little confused about what end-users will be able
to do versus my app itself however. For instance, if I create a read-only
folder, my app (running under IUSR) can read it witho... more >>
Each HTTP object being requested twice (401 then 200 responses)
Posted by benny.hauk@gmail.com at 3/3/2008 7:42:08 AM
I'm running a .NET 1.1 app on IIS6 with keep-alives and Session state
enabled. Directory Security is set to only allow "Integrated Windows
Authentication" and the web.config authentication setting is
"windows". The web pages load fine and the client is correctly
passing the current user's cred... more >>
|