|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
IIS suddenly wants login?Have a wierd problem. I have IIS 6 on Win2k3 Standard, setup for anonymous connections only. Its hosting a few web services and web sites under the Default web site using Asp.Net 1.1 and 2.0. The problem is that for some reason it will suddenly decide that it wants you to login (both Firefox and IE). If you cancel, you are denied access to the page. Using the IIS Manager to Restart IIS fixes the problem... only to have it resurface again some time later. I believe I was getting this behaviour on IIS 5.1 (winXP) as well. Any ideas what it might be?? Thanks Andy When you allow anonymous access, IIS still needs to use a user account get
access to the files off the hard disk. So it impersonates a user account. By default this is IUSR_<machinename> for static files and ASP files, and the web app pool's identity (by default Network Service) for ASP.NET files. If these accounts can't get access to the files, the user would be prompted to supply alternate credentials. So, I would start by enabling Object Access Auditing in the Local Security Policy and audit access to the files (or use Filemon from www.sysinternals.com) and see if either IUSR_<machinename> or the Network Service account are being denied access to any of your website's files. Cheers Ken <ajj3***@alum.rit.edu> wrote in message Show quoteHide quote news:1141844315.213037.117740@e56g2000cwe.googlegroups.com... : Hi all, : : Have a wierd problem. I have IIS 6 on Win2k3 Standard, setup for : anonymous connections only. Its hosting a few web services and web : sites under the Default web site using Asp.Net 1.1 and 2.0. : : The problem is that for some reason it will suddenly decide that it : wants you to login (both Firefox and IE). If you cancel, you are : denied access to the page. : : Using the IIS Manager to Restart IIS fixes the problem... only to have : it resurface again some time later. : : I believe I was getting this behaviour on IIS 5.1 (winXP) as well. : : Any ideas what it might be?? : : Thanks : Andy : Ken,
Thanks for the tips, but I've already checked those. Also, it doesn't explain why it normally works, then suddenly (no file changes / permission changes at all) IIS just starts prompting. As I said, a simple iisreset removes the login prompts, so I doubt its a file permissions issue. Any other ideas? Thanks Andy
Install SSL on Default Website Affects Other websites???
Remember My Password checkbox IIS6 on Win 2003 server ISAPI loadLibrary security problem no client-answer on challenge-msg (type2) About SSL security and IIS 6.0 The call to Server.CreateObject failed while checking permissions. Strange login issue SSL Performance problems when migrating to IIS6 IIS 6 problem Copy files from network share to WEB Server local directory |
|||||||||||||||||||||||