Integrated Windows Authority setting causing IIS 6.0 to crash

11 May 2006 1:44 PM

lstainer

I hope you can help me.

I am running a website (classic ASP) in IIS 6.0 on Windows 2003 Server.
I have had to change the security setting in IIS from "Anonymous
Access" to "Integrated Windows Authentication" in order to pick up the
Server Variable value REMOTE_USER.

This has resulted in IIS crashing repeatedly, and Security Event
Logging shows a large number of Event ID 680, 576, 540 and 538 logs
(perhaps one each for every separate page request) as well as the
occasional 7034.

Can you give me some advice?

12 May 2006 12:27 PM

Ken Schaefer

Please post event details (if you open the event, there is a copy button
that lets you copy the event information). Paste it into a new message

Additionally, have you installed either DebugDiag (part of the IIS
Diagnostics Toolkit) or IISState to determine the cause of the crash?

www.adOpenStatic.com/faq/IISconfigureIISState.aspx (IISState)
www.iisdiagnostics.com (DebugDiag)

Cheers
Ken

<lstai***@accans.co.uk> wrote in message
Show quoteHide quote

news:1147355079.850399.80190@i40g2000cwc.googlegroups.com...
>I hope you can help me.
>
> I am running a website (classic ASP) in IIS 6.0 on Windows 2003 Server.
> I have had to change the security setting in IIS from "Anonymous
> Access" to "Integrated Windows Authentication" in order to pick up the
> Server Variable value REMOTE_USER.
>
> This has resulted in IIS crashing repeatedly, and Security Event
> Logging shows a large number of Event ID 680, 576, 540 and 538 logs
> (perhaps one each for every separate page request) as well as the
> occasional 7034.
>
> Can you give me some advice?
>

14 May 2006 5:31 AM

David Wang [Msft]

http://blogs.msdn.com/david.wang/archive/2005/12/31/HOWTO_Basics_of_IIS6_Troubleshooting.aspx
http://blogs.msdn.com/david.wang/archive/2005/07/14/HOWTO_Diagnose_IIS_401_Access_Denied.aspx
http://blogs.msdn.com/david.wang/archive/2005/08/29/HOWTO_Understand_and_Diagnose_an_AppPool_Crash.aspx

The event log IDs you name are not errors. I also doubt that IIS is crashing
repeatedly because that would result in a 503 Service Unavailable very soon.
7034 is a generic ID that indicates SOME service crashed (you need to
provide the event data so that we know which service crashed) - it may have
nothing to do with your issue.

My suspicion is that KeepAlive has been disabled on your machine due to
other security lockdowns, which would prevent the NTLM protocol part of
"Integrated Windows Authentication" from working. That failure is by-design
since your configuration simultaneously enables NTLM and disables it to
fail.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

<lstai***@accans.co.uk> wrote in message

Show quoteHide quote

news:1147355079.850399.80190@i40g2000cwc.googlegroups.com...
>I hope you can help me.
>
> I am running a website (classic ASP) in IIS 6.0 on Windows 2003 Server.
> I have had to change the security setting in IIS from "Anonymous
> Access" to "Integrated Windows Authentication" in order to pick up the
> Server Variable value REMOTE_USER.
>
> This has resulted in IIS crashing repeatedly, and Security Event
> Logging shows a large number of Event ID 680, 576, 540 and 538 logs
> (perhaps one each for every separate page request) as well as the
> occasional 7034.
>
> Can you give me some advice?
>