Intranet problem - 404 and 405 errors

microsoft.public.inetserver.iis.security

8 Apr 2005 5:01 PM

David

We have recently moved from Server 2000 to SBS 2003. In addition to the
companyweb site, I also wanted to set up an intranet that housed a few
functions and applications for our internal users that are html-based.

I created a new web-site, etc. called home. If I type http://home in my
browser, I can get the web page that I created. However, there are some
files located in the same directory that can't be accessed. One is an ini
file and the other is an executable in the cgi-bin sub-directory.

1. I have an app that looks for the ini file in the root directory of the
site, and it can't find it. If I change the extension of the ini file to
txt, then I can type the address in the browser and find it. But if I try to
use the browser to find the file with the ini extension, I get a 404 error
"Page cannot be found". But I know the file is there, right alongside the
txt version.

2. Also, I have another html page that tries to run a vb cgi executable in
the cgi-bin sub-directory. The code works, because it worked on my old
server. I copied the html file and the executable (exe file) to the new
server, but when I try to execute it, I get a 405 error "Page cannot be
displayed" and it mentions HTTP verbs not being allowed. I tried adding the
POST and GET verbs to the html extension (recommendation from a help site),
but that didn't work.

The only thing I can think of is that the increased security that is the
default for SBS 2003 is preventing me from seeing the files/executables on my
site. I don't need this site to be accessable from outside the network, only
inside. I've searched the MS Knowledgebase, but have been unable to find
anything useful. Any ideas out there?

--
David

Denver, CO

9 Apr 2005 10:14 AM

Jason Brown [MSFT]

IIS 6.0 will not serve files for which it cannot determin a correct mime
type

http://support.microsoft.com/default.aspx?scid=kb;en-us;326965

do you have the exact error for the second one?

--
Jason Brown
Microsoft GTSC, IIS

This posting is provided "AS IS" with no warranties, and confers no rights.

Show quoteHide quote

"David" <Da***@discussions.microsoft.com> wrote in message
news:4AFFECE2-4638-4AF1-8C23-01103B1FDC3A@microsoft.com...
> We have recently moved from Server 2000 to SBS 2003. In addition to the
> companyweb site, I also wanted to set up an intranet that housed a few
> functions and applications for our internal users that are html-based.
>
> I created a new web-site, etc. called home. If I type http://home in my
> browser, I can get the web page that I created. However, there are some
> files located in the same directory that can't be accessed. One is an ini
> file and the other is an executable in the cgi-bin sub-directory.
>
> 1. I have an app that looks for the ini file in the root directory of the
> site, and it can't find it. If I change the extension of the ini file to
> txt, then I can type the address in the browser and find it. But if I try
> to
> use the browser to find the file with the ini extension, I get a 404 error
> "Page cannot be found". But I know the file is there, right alongside the
> txt version.
>
> 2. Also, I have another html page that tries to run a vb cgi executable
> in
> the cgi-bin sub-directory. The code works, because it worked on my old
> server. I copied the html file and the executable (exe file) to the new
> server, but when I try to execute it, I get a 405 error "Page cannot be
> displayed" and it mentions HTTP verbs not being allowed. I tried adding
> the
> POST and GET verbs to the html extension (recommendation from a help
> site),
> but that didn't work.
>
> The only thing I can think of is that the increased security that is the
> default for SBS 2003 is preventing me from seeing the files/executables on
> my
> site. I don't need this site to be accessable from outside the network,
> only
> inside. I've searched the MS Knowledgebase, but have been unable to find
> anything useful. Any ideas out there?
>
> --
> David
>
> Denver, CO

12 Apr 2005 4:38 PM

David

Thank you! That took care of the first issue. And by following some ideas
that it gave me, I got some headway on the second, but it isn't totally
fixed. The exact error for the second one is:
-------Start error list----------
The page cannot be displayed
The page you are looking for cannot be displayed because an invalid method
(HTTP verb) was used to attempt access. --------------------------------------------------------------------------------

Please try the following:

Contact the Web site administrator if you believe that this request should
be allowed.
Make sure that the Web site address displayed in the address bar of your
browser is spelled and formatted correctly.
HTTP Error 405 - The HTTP verb used to access this page is not allowed.
Internet Information Services (IIS)
--------------------------------------------------------------------------------

Technical Information (for support personnel)

Go to Microsoft Product Support Services and perform a title search for the
words HTTP and 405.
Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for
topics titled Setting Application Mappings, Securing Your Site with Web Site
Permissions, and About Custom Error Messages.
---------End error list----------

I tried some of the suggestions on the error, but can't figure out what dll
goes with .exe files created with VB. I was able to Allow "All unknown CGI
Extensions", but that is somewhat of a security risk. Any additional help
would be appreciated

David

Denver, CO

Show quoteHide quote

"Jason Brown [MSFT]" wrote:

> IIS 6.0 will not serve files for which it cannot determin a correct mime
> type
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;326965
>
> do you have the exact error for the second one?
>
>
> --
> Jason Brown
> Microsoft GTSC, IIS
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "David" <Da***@discussions.microsoft.com> wrote in message
> news:4AFFECE2-4638-4AF1-8C23-01103B1FDC3A@microsoft.com...
> > We have recently moved from Server 2000 to SBS 2003. In addition to the
> > companyweb site, I also wanted to set up an intranet that housed a few
> > functions and applications for our internal users that are html-based.
> >
> > I created a new web-site, etc. called home. If I type http://home in my
> > browser, I can get the web page that I created. However, there are some
> > files located in the same directory that can't be accessed. One is an ini
> > file and the other is an executable in the cgi-bin sub-directory.
> >
> > 1. I have an app that looks for the ini file in the root directory of the
> > site, and it can't find it. If I change the extension of the ini file to
> > txt, then I can type the address in the browser and find it. But if I try
> > to
> > use the browser to find the file with the ini extension, I get a 404 error
> > "Page cannot be found". But I know the file is there, right alongside the
> > txt version.
> >
> > 2. Also, I have another html page that tries to run a vb cgi executable
> > in
> > the cgi-bin sub-directory. The code works, because it worked on my old
> > server. I copied the html file and the executable (exe file) to the new
> > server, but when I try to execute it, I get a 405 error "Page cannot be
> > displayed" and it mentions HTTP verbs not being allowed. I tried adding
> > the
> > POST and GET verbs to the html extension (recommendation from a help
> > site),
> > but that didn't work.
> >
> > The only thing I can think of is that the increased security that is the
> > default for SBS 2003 is preventing me from seeing the files/executables on
> > my
> > site. I don't need this site to be accessable from outside the network,
> > only
> > inside. I've searched the MS Knowledgebase, but have been unable to find
> > anything useful. Any ideas out there?
> >
> > --
> > David
> >
> > Denver, CO
>
>
>

13 Apr 2005 1:41 AM

David Wang [Msft]

I presume the HTML has a FORM that is accessing the EXE. If so, please give
the <FORM> line from the HTML.

405 usually happens when you try to POST to a URL that is not deemed to be
executable by IIS. I suspect you either have some ScriptMap setting from the
old server that you failed to move to this server, or you did not allow
"Scripts" or "Scripts and Executables" Execute Permission, or you did not
allow the specified verb on the ScriptMap setting.

Both issues you describe can be directly diagnosed from the IIS web log
files for the website, and if you search on the error codes, you will find
the right solution. IIS6 on Windows Server 2003 pretty much expects that
you use either the event log, HTTPERR log, or IIS web log files to
troubleshoot issues -- HTML error messages are not going to disclose much
details for security reasons. It doesn't matter that your website is
Internal; we're giving you a security configuration to begin with -- you are
fully responsible for the configuration afterwards.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"David" <Da***@discussions.microsoft.com> wrote in message
news:05053AA2-44B6-4CBB-89AF-DB075F16ABD7@microsoft.com...

Thank you! That took care of the first issue. And by following some ideas
that it gave me, I got some headway on the second, but it isn't totally
fixed. The exact error for the second one is:
-------Start error list----------
The page cannot be displayed
The page you are looking for cannot be displayed because an invalid method
(HTTP verb) was used to attempt access.
----------------------------------------------------------------------------
----

Please try the following:

Contact the Web site administrator if you believe that this request should
be allowed.
Make sure that the Web site address displayed in the address bar of your
browser is spelled and formatted correctly.
HTTP Error 405 - The HTTP verb used to access this page is not allowed.
Internet Information Services (IIS)

----------------------------------------------------------------------------
----

Technical Information (for support personnel)

Go to Microsoft Product Support Services and perform a title search for the
words HTTP and 405.
Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for
topics titled Setting Application Mappings, Securing Your Site with Web Site
Permissions, and About Custom Error Messages.
---------End error list----------

I tried some of the suggestions on the error, but can't figure out what dll
goes with .exe files created with VB. I was able to Allow "All unknown CGI
Extensions", but that is somewhat of a security risk. Any additional help
would be appreciated

David

Denver, CO

Show quoteHide quote

"Jason Brown [MSFT]" wrote:

> IIS 6.0 will not serve files for which it cannot determin a correct mime
> type
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;326965
>
> do you have the exact error for the second one?
>
>
> --
> Jason Brown
> Microsoft GTSC, IIS
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "David" <Da***@discussions.microsoft.com> wrote in message
> news:4AFFECE2-4638-4AF1-8C23-01103B1FDC3A@microsoft.com...
> > We have recently moved from Server 2000 to SBS 2003. In addition to the
> > companyweb site, I also wanted to set up an intranet that housed a few
> > functions and applications for our internal users that are html-based.
> >
> > I created a new web-site, etc. called home. If I type http://home in my
> > browser, I can get the web page that I created. However, there are some
> > files located in the same directory that can't be accessed. One is an
ini
> > file and the other is an executable in the cgi-bin sub-directory.
> >
> > 1. I have an app that looks for the ini file in the root directory of
the
> > site, and it can't find it. If I change the extension of the ini file
to
> > txt, then I can type the address in the browser and find it. But if I
try
> > to
> > use the browser to find the file with the ini extension, I get a 404
error
> > "Page cannot be found". But I know the file is there, right alongside
the
> > txt version.
> >
> > 2. Also, I have another html page that tries to run a vb cgi executable
> > in
> > the cgi-bin sub-directory. The code works, because it worked on my old
> > server. I copied the html file and the executable (exe file) to the new
> > server, but when I try to execute it, I get a 405 error "Page cannot be
> > displayed" and it mentions HTTP verbs not being allowed. I tried adding
> > the
> > POST and GET verbs to the html extension (recommendation from a help
> > site),
> > but that didn't work.
> >
> > The only thing I can think of is that the increased security that is the
> > default for SBS 2003 is preventing me from seeing the files/executables
on
> > my
> > site. I don't need this site to be accessable from outside the network,
> > only
> > inside. I've searched the MS Knowledgebase, but have been unable to
find
> > anything useful. Any ideas out there?
> >
> > --
> > David
> >
> > Denver, CO
>
>
>