|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Why is login requesting domain for some users?I have a public web with a few restricted sub-webs, which I authenticate
using basic (clear text) authentication. For most users when they try to access a restricted sub-web, they're prompted for username & password. When they supply these, they're in OK. For a few users, their prompt includes username, password AND domain. The server is not in a domain, it's configured as standalone. Here's the kicker - nweh I try to troubleshoot this by looking at the log files and event viewer - there are no entries. I have entries for other logins (success and failure) - but not for these users. Apparently these logins are never getting to my system at all. Question - what setting localy could cause this domian to appear on the login screen - then fail to send any login info to my server? I'm suspecting you are seeing the domain field in IE that are with w2k
machine, afaik, IE in xp or above only has username and password fields. Just leave the domain empty, by entering username/password you can't login? Can you post few entires of the IIS log here? -- Show quoteHide quoteRegards, Bernard Cheah http://www.microsoft.com/iis/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ "Frank Rowe" <frank.rowe@robins.nospam.af.mil> wrote in message news:%232U5el9iFHA.2904@tk2msftngp13.phx.gbl... >I have a public web with a few restricted sub-webs, which I authenticate > using basic (clear text) authentication. For most users when they try to > access a restricted sub-web, they're prompted for username & password. > When > they supply these, they're in OK. > For a few users, their prompt includes username, password AND domain. The > server is not in a domain, it's configured as standalone. > > Here's the kicker - nweh I try to troubleshoot this by looking at the log > files and event viewer - there are no entries. I have entries for other > logins (success and failure) - but not for these users. Apparently these > logins are never getting to my system at all. > > Question - what setting localy could cause this domian to appear on the > login screen - then fail to send any login info to my server? > > The user is running Win 2K, so you're right about that aspect.
We've tried leaving domain blank, using the server's machine name, workgroup name, IP domain - nothing works. As I said earlier, the login isn't even getting to my server - so there are no log entries to show. Show quoteHide quote "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message news:u5o9A#AjFHA.2904@tk2msftngp13.phx.gbl... > I'm suspecting you are seeing the domain field in IE that are with w2k > machine, afaik, IE in xp or above only has username and password fields. > Just leave the domain empty, by entering username/password you can't login? > > Can you post few entires of the IIS log here? > > -- > Regards, > Bernard Cheah > http://www.microsoft.com/iis/ > http://www.iiswebcastseries.com/ > http://www.msmvps.com/bernard/ > > How about looking at the iis log file ?
default path %windir%/system32/logfiles/w3svcX x - site id. -- Show quoteHide quoteRegards, Bernard Cheah http://www.microsoft.com/iis/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ "Frank Rowe" <frank.rowe@robins.nospam.af.mil> wrote in message news:O5vtlnJjFHA.1968@TK2MSFTNGP14.phx.gbl... > The user is running Win 2K, so you're right about that aspect. > We've tried leaving domain blank, using the server's machine name, > workgroup > name, IP domain - nothing works. > As I said earlier, the login isn't even getting to my server - so there > are > no log entries to show. > > "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message > news:u5o9A#AjFHA.2904@tk2msftngp13.phx.gbl... >> I'm suspecting you are seeing the domain field in IE that are with w2k >> machine, afaik, IE in xp or above only has username and password fields. >> Just leave the domain empty, by entering username/password you can't > login? >> >> Can you post few entires of the IIS log here? >> >> -- >> Regards, >> Bernard Cheah >> http://www.microsoft.com/iis/ >> http://www.iiswebcastseries.com/ >> http://www.msmvps.com/bernard/ >> >> > > I know about the iis log file. There are NO entries in the iis log file from
this user. Show quoteHide quote "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message news:eYfNUdQjFHA.1968@TK2MSFTNGP14.phx.gbl... > How about looking at the iis log file ? > default path %windir%/system32/logfiles/w3svcX > x - site id. > > -- > Regards, > Bernard Cheah > http://www.microsoft.com/iis/ > http://www.iiswebcastseries.com/ > http://www.msmvps.com/bernard/ > > > "Frank Rowe" <frank.rowe@robins.nospam.af.mil> wrote in message > news:O5vtlnJjFHA.1968@TK2MSFTNGP14.phx.gbl... >> The user is running Win 2K, so you're right about that aspect. >> We've tried leaving domain blank, using the server's machine name, >> workgroup >> name, IP domain - nothing works. >> As I said earlier, the login isn't even getting to my server - so there >> are >> no log entries to show. >> >> "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message >> news:u5o9A#AjFHA.2904@tk2msftngp13.phx.gbl... >>> I'm suspecting you are seeing the domain field in IE that are with w2k >>> machine, afaik, IE in xp or above only has username and password fields. >>> Just leave the domain empty, by entering username/password you can't >> login? >>> >>> Can you post few entires of the IIS log here? >>> >>> -- >>> Regards, >>> Bernard Cheah >>> http://www.microsoft.com/iis/ >>> http://www.iiswebcastseries.com/ >>> http://www.msmvps.com/bernard/ >>> >>> >> >> > > huh ? you sure? not even fail requests ? check the client ip address? if
it doesn't make it to IIS, then you should check what could be possibly blocking the request, firewall? -- Show quoteHide quoteRegards, Bernard Cheah http://www.microsoft.com/iis/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ "Frank Rowe" <rowesouth_nospan@not_earthlink.net> wrote in message news:ei4OJI0jFHA.2916@TK2MSFTNGP14.phx.gbl... >I know about the iis log file. There are NO entries in the iis log file >from this user. > > > "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message > news:eYfNUdQjFHA.1968@TK2MSFTNGP14.phx.gbl... >> How about looking at the iis log file ? >> default path %windir%/system32/logfiles/w3svcX >> x - site id. >> >> -- >> Regards, >> Bernard Cheah >> http://www.microsoft.com/iis/ >> http://www.iiswebcastseries.com/ >> http://www.msmvps.com/bernard/ >> >> >> "Frank Rowe" <frank.rowe@robins.nospam.af.mil> wrote in message >> news:O5vtlnJjFHA.1968@TK2MSFTNGP14.phx.gbl... >>> The user is running Win 2K, so you're right about that aspect. >>> We've tried leaving domain blank, using the server's machine name, >>> workgroup >>> name, IP domain - nothing works. >>> As I said earlier, the login isn't even getting to my server - so there >>> are >>> no log entries to show. >>> >>> "Bernard Cheah [MVP]" <qbern***@hotmail.com.discuss> wrote in message >>> news:u5o9A#AjFHA.2904@tk2msftngp13.phx.gbl... >>>> I'm suspecting you are seeing the domain field in IE that are with w2k >>>> machine, afaik, IE in xp or above only has username and password >>>> fields. >>>> Just leave the domain empty, by entering username/password you can't >>> login? >>>> >>>> Can you post few entires of the IIS log here? >>>> >>>> -- >>>> Regards, >>>> Bernard Cheah >>>> http://www.microsoft.com/iis/ >>>> http://www.iiswebcastseries.com/ >>>> http://www.msmvps.com/bernard/ >>>> >>>> >>> >>> >> >> > >
Other interesting topics
Integrated Authenticatoin - Default to the main domain
IIS authentification with a ASP Application on a SAMBA host IIS6 NT Authentication fails http to https redirect problem SSL Issue - Urgent IIS 5 - Integrated Windows Authentication Issues Basic auth without dialog - no database secure ftp firewall suggestions? Running IIS MMC from workstation |
|||||||||||||||||||||||