Please Help! - Advanced Digest With IIS6

6 Jul 2005 11:49 AM

Jan Bühler

Hi, I recently set up an IIS6 box on a Windows Server 2003 domain controller
to take advantage of the new advanced digest that doesn't need reversible
encryption enabled passwords. I enabled UseDIGESTSSP in the Metabase, and
Digest works... Almost!

You see, say I apply Digest authentication thru the IIS manager MMC snap in
to a whole website which is say, www.test.com. Thing is, when i log onto
www.test.com with IE6 it keeps prompting for the password and ends up with a
"401.1 invalid server credentials". Thing is, if i go to www.test.com/test
the DIGEST authentication works fine. I've tried creating other websites but
the root directory never seems to authenticate. I've never had this on my
old web server running on IIS6 + Windows Server 2003 SP1.

When I swtich to the insecure basic authentication it works just fine.

Any help would be greatly appreciated!

Thanks!

6 Jul 2005 12:24 PM

Ken Schaefer

401.1 is Logon Failed, not Invalid Server Credentials

a) Can you confirm the exact error number and message you are seeing?
b) Can you check, in the IIS logfiles, what account IIS is attempting to use
to access the file?
c) Does that account have appropriate NTFS permissions to the file in
question?

Thanks

Cheers
Ken

--
IIS Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com

Show quoteHide quote

"Jan Bühler" <j**@rufanundspar.com> wrote in message
news:O$$tDDigFHA.1612@TK2MSFTNGP12.phx.gbl...
: Hi, I recently set up an IIS6 box on a Windows Server 2003 domain
controller
: to take advantage of the new advanced digest that doesn't need reversible
: encryption enabled passwords. I enabled UseDIGESTSSP in the Metabase, and
: Digest works... Almost!
:
: You see, say I apply Digest authentication thru the IIS manager MMC snap
in
: to a whole website which is say, www.test.com. Thing is, when i log onto
: www.test.com with IE6 it keeps prompting for the password and ends up with
a
: "401.1 invalid server credentials". Thing is, if i go to www.test.com/test
: the DIGEST authentication works fine. I've tried creating other websites
but
: the root directory never seems to authenticate. I've never had this on my
: old web server running on IIS6 + Windows Server 2003 SP1.
:
: When I swtich to the insecure basic authentication it works just fine.
:
: Any help would be greatly appreciated!
:
: Thanks!
:
:

6 Jul 2005 2:55 PM

Jan Bühler

Hi Ken,

Thank you very much for your answer.
a) Can you confirm the exact error number and message you are seeing?

HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.

b) Can you check, in the IIS logfiles, what account IIS is attempting to
use

When access to any folder under the domain (www.test.com/test) it works and
in the IIS logfile I can see the user account I introduced for the digest
authentication:

###2005-07-06 08:20:36 192.168.30.100 GET /index.aspx - 80 GRUPPE\jan
80.38.161.238
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+1.0.3705)
302 0 0###

When I access to the domain alone (www.test.com) it doesn't work, in the IIS
logfiles I can't see any user:
###2005-07-06 08:19:59 192.168.30.100 GET / - 80 - 80.38.161.238
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+1.0.3705)
401 1 2148074248###

c) Does that account have appropriate NTFS permissions to the file in
question?
Yes.

Thanks!

Cheers
Jan

Show quoteHide quote

"Ken Schaefer" <kenREM***@THISadOpenStatic.com> schrieb im Newsbeitrag
news:uree%23VigFHA.824@TK2MSFTNGP14.phx.gbl...
> 401.1 is Logon Failed, not Invalid Server Credentials
>
> a) Can you confirm the exact error number and message you are seeing?
> b) Can you check, in the IIS logfiles, what account IIS is attempting to
> use
> to access the file?
> c) Does that account have appropriate NTFS permissions to the file in
> question?
>
> Thanks
>
> Cheers
> Ken
>
> --
> IIS Blog: www.adopenstatic.com/cs/blogs/ken/
> Web: www.adopenstatic.com
>
>
> "Jan Bühler" <j**@rufanundspar.com> wrote in message
> news:O$$tDDigFHA.1612@TK2MSFTNGP12.phx.gbl...
> : Hi, I recently set up an IIS6 box on a Windows Server 2003 domain
> controller
> : to take advantage of the new advanced digest that doesn't need
> reversible
> : encryption enabled passwords. I enabled UseDIGESTSSP in the Metabase,
> and
> : Digest works... Almost!
> :
> : You see, say I apply Digest authentication thru the IIS manager MMC snap
> in
> : to a whole website which is say, www.test.com. Thing is, when i log onto
> : www.test.com with IE6 it keeps prompting for the password and ends up
> with
> a
> : "401.1 invalid server credentials". Thing is, if i go to
> www.test.com/test
> : the DIGEST authentication works fine. I've tried creating other websites
> but
> : the root directory never seems to authenticate. I've never had this on
> my
> : old web server running on IIS6 + Windows Server 2003 SP1.
> :
> : When I swtich to the insecure basic authentication it works just fine.
> :
> : Any help would be greatly appreciated!
> :
> : Thanks!
> :
> :
>
>

Please Help! - Advanced Digest With IIS6 - 401.1