Home All Groups Group Topic Archive Search About

HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. Digest authentication

Author
3 May 2005 4:25 PM
Dmitri Kouminov
I created virtual directory on my development server and specified Digest
authentication. I got error message "HTTP Error 401.1 - Unauthorized: Access
is denied due to invalid credentials". Digest authentication works on my
production server without any problems. My configuration is IIS 6, MS
Windows Server 2003 (no service packs).

Author
4 May 2005 2:52 AM
Wei-Dong XU [MSFT]
Hi Dmitri,

Digest authentication will require the Active Directory support. This means
that we can only use the domain account to logon into the site and the IIS
server should be deployed into one domain. IIS will need to authenticate
the domain account from the domain controller of the active directory;
there is no need to configure the IIS server to DC.

So for the scenario, if the develpoment server hasn't been added into the
domain, the digest authentication method can't validate the domain account
and 401.1 will be sent back to the client. Furthermore, if there is no one
domain available at the development environment, I'd suggest you can use
the Integrated Windows authentication so that the accounts at the IIS
server can be used for the logon.

Please feel free to let me know if you have any question. My pleasure to be
of  any assistance.

Best Regards,
Wei-Dong XU
Microsoft Product Support Services
This posting is provided "AS IS" with no warranties, and confers no rights.
Author
4 May 2005 2:50 PM
Dmitri Kouminov
My development server is in the same domain in our company's Active
Directory as production server. I'm use the same user name and password for
Digest authentication on both server. And it works on production but not on
development.
Unfortunately Integrated Windows authentication is not an option in my case.
I'm developing web service that should be available from outside of
company's firewall. Interesting point is that basic and integrated windows
authentication works on both servers.
In the
http://www.iis-resources.com/modules/newbb/viewtopic.php?topic_id=3365&forum=5
discuses similar (but not exactly the same) problem.
Thanks,
Dmitri

Show quoteHide quote
"Wei-Dong XU [MSFT]" <v-w***@online.microsoft.com> wrote in message
news:QroKaRFUFHA.2184@TK2MSFTNGXA01.phx.gbl...
> Hi Dmitri,
>
> Digest authentication will require the Active Directory support. This
means
> that we can only use the domain account to logon into the site and the IIS
> server should be deployed into one domain. IIS will need to authenticate
> the domain account from the domain controller of the active directory;
> there is no need to configure the IIS server to DC.
>
> So for the scenario, if the develpoment server hasn't been added into the
> domain, the digest authentication method can't validate the domain account
> and 401.1 will be sent back to the client. Furthermore, if there is no one
> domain available at the development environment, I'd suggest you can use
> the Integrated Windows authentication so that the accounts at the IIS
> server can be used for the logon.
>
> Please feel free to let me know if you have any question. My pleasure to
be
> of  any assistance.
>
> Best Regards,
> Wei-Dong XU
> Microsoft Product Support Services
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
Author
4 May 2005 5:53 PM
Dmitri Kouminov
Ok. It fixed now. It was some error on the domain controller.
Thanks,
Dmitri

Show quoteHide quote
"Dmitri Kouminov" <kouminovd@nospam.nospam> wrote in message
news:OwsZJiLUFHA.3584@TK2MSFTNGP14.phx.gbl...
> My development server is in the same domain in our company's Active
> Directory as production server. I'm use the same user name and password
for
> Digest authentication on both server. And it works on production but not
on
> development.
> Unfortunately Integrated Windows authentication is not an option in my
case.
> I'm developing web service that should be available from outside of
> company's firewall. Interesting point is that basic and integrated windows
> authentication works on both servers.
> In the
>
http://www.iis-resources.com/modules/newbb/viewtopic.php?topic_id=3365&forum=5
Show quoteHide quote
> discuses similar (but not exactly the same) problem.
> Thanks,
> Dmitri
>
> "Wei-Dong XU [MSFT]" <v-w***@online.microsoft.com> wrote in message
> news:QroKaRFUFHA.2184@TK2MSFTNGXA01.phx.gbl...
> > Hi Dmitri,
> >
> > Digest authentication will require the Active Directory support. This
> means
> > that we can only use the domain account to logon into the site and the
IIS
> > server should be deployed into one domain. IIS will need to authenticate
> > the domain account from the domain controller of the active directory;
> > there is no need to configure the IIS server to DC.
> >
> > So for the scenario, if the develpoment server hasn't been added into
the
> > domain, the digest authentication method can't validate the domain
account
> > and 401.1 will be sent back to the client. Furthermore, if there is no
one
> > domain available at the development environment, I'd suggest you can use
> > the Integrated Windows authentication so that the accounts at the IIS
> > server can be used for the logon.
> >
> > Please feel free to let me know if you have any question. My pleasure to
> be
> > of  any assistance.
> >
> > Best Regards,
> > Wei-Dong XU
> > Microsoft Product Support Services
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> >
>
>
Author
5 May 2005 5:39 AM
Wei-Dong XU [MSFT]
Very glad to hear the issue is resolved! You are very welcome!

Best Regards,
Wei-Dong XU
Microsoft Product Support Services
This posting is provided "AS IS" with no warranties, and confers no rights.