all groups > iis security > june 2008
FTP access issues
Posted by nandagopalrvarma at 6/22/2008 9:59:04 PM
Hi ,
I have a Windows Server 2003 R2 Enterprise box which is an ADC and
runs SMS 2003 SP3 primary site, a FTP web site and ISA 2006 to
protect
the FTP as well provide Web Proxy services. My FTP site is running
quite nicely though I've heard the above mentioned setup is not good
and can cause l... more >>
Unwanted login request
Posted by Ben at 6/20/2008 1:05:53 PM
Problem: trying to move web sites to a second controller in my domain, and
I'm getting unwanted request for authentication.
Detail: when the IP address of the site is on the domain controller, I
attempt to access it with IE. If I've set the site up in IIS, I see it, if
I don't, I get a pag... more >>
Web server delivers wrong SSL certificate information
Posted by Jerry Hodson at 6/20/2008 7:18:00 AM
Completely befuddled here.
Running IIS 6.0 on my web server for many years now and have never had any
issues when replacing expiring certificate file with new ones, until now.
When I hit the web site, the certificate that I can view is the old expired
one. Not the new one that I replced it... more >>
SelfSSL IIS 6.0
Posted by S H A R I Q U E at 6/19/2008 12:03:02 PM
i have setup intranet website and encrypted its content using SelfSSL.
Now, i want to enable external users outside the company to access this
website using HTTPS. Is it possible to utilize SelfSSL for both intranet and
extranet or do i need to purchase a certificate from VeriSign to encryp
t... more >>
_stat from ISAPI Extension always returns FILE_NOT_FOUND
Posted by Jason Viers at 6/19/2008 11:27:03 AM
I have an IIS 6 ISAPI Extension that is set as a Wildcard Application
Map. The virtual directory is set to Inegrated Authentication
only so it impersonates the requesting user (which GetUserNameEx
confirms).
The IIS machine is trusted for delegation, and the extension uses
WinHttp to access ... more >>
Kerberos Problem with App Pool running as Domain Account
Posted by VC at 6/19/2008 6:00:00 AM
Good Morning,
I have multiple applications running with integrated security to connect to
a SQL back-end database. Everything works fine on our production servers
which use the default system accounts for the Application Pool. However, I
had to change this to use a domain account because ... more >>
no access to a sharepoint website
Posted by NT at 6/18/2008 8:41:08 AM
hello
I made a new intranet with sharepoint, but i cannot access it from my others
branch office (on a GLOBALVPN)
On the website, I only select integrated authentification
After research i nearly sur that my firewall block the NTLM
authentification, for example if i disconnect the firew... more >>
IIS 6 Cert Wizard - Copy Certificate Another Server - Access is De
Posted by Scott at 6/18/2008 6:30:02 AM
I'm trying to use IIS Cert Wizard to temporarily copy the wildcard
certificate from a production web server to a dev web server and then install
and apply the cert to the dev web server. When I specify the production web
server's name and with userid and password having domain admin and enterp... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS7: CreateProcessWithLogonW access denied
Posted by Kyle Alons at 6/17/2008 3:53:47 PM
Code like this in an ASP.NET web page (code behind .cs file) works in IIS
prior to v7, but fails with access denied (5) on v7. Any ideas on a what
permissions are required for this to work? Thanks.
[StructLayout(LayoutKind.Sequential)]
internal struct PROCESS_INFORMATION
{
... more >>
physical directory on remote server
Posted by ravinder panchal at 6/17/2008 3:35:05 AM
hi all,
we host a one web application in datacenter.we create a one virtual
directory on iis and map it on directory reside on local drive .every thing
is running fine but my management want that move the physical on remote
server. i read the artical from one of the ms website and shift th... more >>
FTPS Clients with IIS7
Posted by BPF (Brian and Paul Fan) at 6/11/2008 9:52:37 AM
Hello:
When will Microsoft's FTP.EXE and Internet Explorer support FTP over SSL
(FTPS) as it is implemented in IIS7?
Also, are there any other FTPS clients besides the following that anyone
knows of?
SmartFTP (www.smartftp.com)
FileZilla (http://filezilla-project.org/)
Moveit Freely (... more >>
IIS file/group permissions and multiple sites
Posted by E-Double at 6/10/2008 5:51:02 AM
On an Win2003/IIS 6 server hosting multipe sites, when file level permissions
and groups are used to set the access control - is there some way to permit a
person who is in one group with access permissions and that has already
signed-in to one of the sites to access a second site on the same ... more >>
Very Strange Requests In My IIS Logs - Possible Hacker
Posted by Jim_H at 6/9/2008 9:33:01 AM
Hopefully this is an appropriate forum for this question. I am noticing some
very strange activity on my web site over the last 3 or 4 days. My site is
using IIS running on Windows Server 2003 and I am using .Net Framework 3.5
with SQL Server 2005 on backend. I cannot tell if what I’m see... more >>
How to set spn to use kerberos Authentication in IIS7 ?
Posted by vx at 6/8/2008 11:52:00 PM
How to set spn to use kerberos Authentication in IIS7 when site hostname is
different to default computer netbios name,and username that runs
application pool is different to network_service?... more >>
iis 5.1, internet explorer, cached credentials and kerberos
Posted by Brian Yuill at 6/6/2008 10:15:06 AM
We have a 5.1 web site set for 'Integrated Windows Authenticatioin' (only).
In Internet Explorer 7.0, we have this site added to our list of local
intranet sites and the User Authentication for that zone is set to 'Automatic
logon only in intranet zone'. We also have 'Enable Integrated Window... more >>
How to renew ssl certificate
Posted by sekhar at 6/6/2008 4:57:01 AM
Hi, we have OWA configured in two servers (WNLB) - Windows 2k3 sp1 and
Exchange2k3 sp2
Our OWA ssl is about to be expired, and we need to renew it. I have couple
of doubts.
- When I try to export, it says I cannot export the private key. Is this
required while renewing?
- Should I do th... more >>
Integrated Security fails using machine name, succeeds using FQN
Posted by Seth Petry-Johnson at 6/5/2008 1:02:04 PM
Active Directory: BAR.COM
Webserver: FOOWEB, IIS 6, single static IP address, running a single ASP.NET
website. Contains a virtual directory (called "/protected") with Integrated
Security as the only authentication option.
When logged in locally to FOOWEB, pointing IE to
http://fooweb/pro... more >>
Automatically adding all extensions to MIME Type
Posted by Saqib Ali at 6/3/2008 2:59:08 PM
It is a terribly time consuming to add the MIME Type (Global
Properties -> HTTP Headers TAB -> MIME Types) one by one. Is there way
to automatically add MIME TYPE for "all" file extensions in a given
dir +subdir on a server?
Any help will be highly appreciated. Thanks
saqib
http://doctri... more >>
URLScan not blocking character is SQL injection
Posted by Keith at 6/3/2008 9:03:01 AM
We are running IIS5 with URLScan 2.5. In the URLScan logs the following is
shown:
[06-03-2008 - 07:19:56] Requests containing the following character
sequences will be rejected:
[06-03-2008 - 07:19:56] '..'
[06-03-2008 - 07:19:56] './'
[06-03-2008 - 07:19:56] '\'
[06-03-2008 - 07:19:5... more >>
How do you force clients' SSL sessions to always connect at 128-bi
Posted by abenzaki at 6/3/2008 6:31:00 AM
How do you ensure that ensure that all SSL sessions connect to the an IIS 6.0
server at 128-bit strength? I'm trying to find out if there is a way to
always force clients/end-users to securely communicate with my web servers at
or above 128-bit SSL encryption... more >>
IIS 6.0 Error
Posted by Pradeep K at 6/3/2008 5:21:00 AM
In the MMC, when i click on the IIS I get a blank screen along with the error
message
"The path specified cannot be used at this time".
I searched the net and found a fix is available as mentioned in the below
link.
http://support.microsoft.com/kb/946517/en-us
Can you please let me know ho... more >>
How do you create client certificates?
Posted by Alastair at 6/3/2008 4:08:00 AM
Hi All,
I am trying to publish a page via IIS/SSL, but do not know how to create
client certificates for the site.
I have a CA server and this has created a server certificate for the server
where the website is. This all works ok apart from when I enable 'require
client certificate' in II... more >>
|