Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP .Net Security > IIS Security strange things

Reply
Thread Tools

IIS Security strange things

 
 
Alexey Smirnov
Guest
Posts: n/a
 
      03-01-2004
I have intranet application based on ASP.NET on Win2000AS (Framework 1.1).

Website uses an Integrated Windows Authentication as Authentication method
in IIS and has following security configuration in the web.config

------------------------------------------
<identity impersonate="false" />

<authentication mode="Windows" />
<authorization>
<deny users="?" />
</authorization>

<customErrors defaultRedirect="CustomError.aspx" mode="Off">
<error statusCode="401" redirect="Custom401.html"/>
</customErrors>
------------------------------------------

And everything goes fine for 99.9% users and not for one only, who always
get a popup login window to login this website.
He has WinXP box, with latest browser, like many others, but for any reason
website cannot recognize that user as a valid internal user.

Any ideas? Thank you


 
Reply With Quote
 
 
 
 
Arvind P Rangan
Guest
Posts: n/a
 
      03-01-2004
Hi ,
In IE open Options -> select Security
Select Custom LEVEL -> User Authentication
Check if the user has checked Prompt for user name and password.
If its marked make it to auttomatic login only in intranet zone.
Arvind
"Alexey Smirnov" <> wrote in message
news:OSktyX5$...
> I have intranet application based on ASP.NET on Win2000AS (Framework 1.1).
>
> Website uses an Integrated Windows Authentication as Authentication method
> in IIS and has following security configuration in the web.config
>
> ------------------------------------------
> <identity impersonate="false" />
>
> <authentication mode="Windows" />
> <authorization>
> <deny users="?" />
> </authorization>
>
> <customErrors defaultRedirect="CustomError.aspx" mode="Off">
> <error statusCode="401" redirect="Custom401.html"/>
> </customErrors>
> ------------------------------------------
>
> And everything goes fine for 99.9% users and not for one only, who always
> get a popup login window to login this website.
> He has WinXP box, with latest browser, like many others, but for any

reason
> website cannot recognize that user as a valid internal user.
>
> Any ideas? Thank you
>
>



 
Reply With Quote
 
 
 
 
Alexey Smirnov
Guest
Posts: n/a
 
      03-01-2004
Hi, Arvind

yes, he has the default level (medium low) for the intranet zone
and in addition that site inserted in Local Intranet Site List
(Security - Sites - Advanced...)

Alexey


"Arvind P Rangan" <> wrote in message
news:%23vNeUd5$...
> Hi ,
> In IE open Options -> select Security
> Select Custom LEVEL -> User Authentication
> Check if the user has checked Prompt for user name and password.
> If its marked make it to auttomatic login only in intranet zone.
> Arvind
> "Alexey Smirnov" <> wrote in message
> news:OSktyX5$...
> > I have intranet application based on ASP.NET on Win2000AS (Framework

1.1).
> >
> > Website uses an Integrated Windows Authentication as Authentication

method
> > in IIS and has following security configuration in the web.config
> >
> > ------------------------------------------
> > <identity impersonate="false" />
> >
> > <authentication mode="Windows" />
> > <authorization>
> > <deny users="?" />
> > </authorization>
> >
> > <customErrors defaultRedirect="CustomError.aspx" mode="Off">
> > <error statusCode="401" redirect="Custom401.html"/>
> > </customErrors>
> > ------------------------------------------
> >
> > And everything goes fine for 99.9% users and not for one only, who

always
> > get a popup login window to login this website.
> > He has WinXP box, with latest browser, like many others, but for any

> reason
> > website cannot recognize that user as a valid internal user.
> >
> > Any ideas? Thank you
> >
> >

>
>



 
Reply With Quote
 
Arvind P Rangan
Guest
Posts: n/a
 
      03-03-2004
Alexey,
Click on Custom Level
and in that See what is selected for User Authentication.
Arvind
"Alexey Smirnov" <> wrote in message
news:%23Iydfq5$...
> Hi, Arvind
>
> yes, he has the default level (medium low) for the intranet zone
> and in addition that site inserted in Local Intranet Site List
> (Security - Sites - Advanced...)
>
> Alexey
>
>
> "Arvind P Rangan" <> wrote in message
> news:%23vNeUd5$...
> > Hi ,
> > In IE open Options -> select Security
> > Select Custom LEVEL -> User Authentication
> > Check if the user has checked Prompt for user name and password.
> > If its marked make it to auttomatic login only in intranet zone.
> > Arvind
> > "Alexey Smirnov" <> wrote in message
> > news:OSktyX5$...
> > > I have intranet application based on ASP.NET on Win2000AS (Framework

> 1.1).
> > >
> > > Website uses an Integrated Windows Authentication as Authentication

> method
> > > in IIS and has following security configuration in the web.config
> > >
> > > ------------------------------------------
> > > <identity impersonate="false" />
> > >
> > > <authentication mode="Windows" />
> > > <authorization>
> > > <deny users="?" />
> > > </authorization>
> > >
> > > <customErrors defaultRedirect="CustomError.aspx" mode="Off">
> > > <error statusCode="401" redirect="Custom401.html"/>
> > > </customErrors>
> > > ------------------------------------------
> > >
> > > And everything goes fine for 99.9% users and not for one only, who

> always
> > > get a popup login window to login this website.
> > > He has WinXP box, with latest browser, like many others, but for any

> > reason
> > > website cannot recognize that user as a valid internal user.
> > >
> > > Any ideas? Thank you
> > >
> > >

> >
> >

>
>



 
Reply With Quote
 
Alexey Smirnov
Guest
Posts: n/a
 
      03-03-2004
User Authentication
Logon
Automatic logon only in Intranet zone

-----------------
Any ideas?

Alexey



"Arvind P Rangan" <> wrote in message
news:uwNu$...
> Alexey,
> Click on Custom Level
> and in that See what is selected for User Authentication.
> Arvind
> "Alexey Smirnov" <> wrote in message
> news:%23Iydfq5$...
> > Hi, Arvind
> >
> > yes, he has the default level (medium low) for the intranet zone
> > and in addition that site inserted in Local Intranet Site List
> > (Security - Sites - Advanced...)
> >
> > Alexey
> >
> >
> > "Arvind P Rangan" <> wrote in message
> > news:%23vNeUd5$...
> > > Hi ,
> > > In IE open Options -> select Security
> > > Select Custom LEVEL -> User Authentication
> > > Check if the user has checked Prompt for user name and password.
> > > If its marked make it to auttomatic login only in intranet zone.
> > > Arvind
> > > "Alexey Smirnov" <> wrote in message
> > > news:OSktyX5$...
> > > > I have intranet application based on ASP.NET on Win2000AS (Framework

> > 1.1).
> > > >
> > > > Website uses an Integrated Windows Authentication as Authentication

> > method
> > > > in IIS and has following security configuration in the web.config
> > > >
> > > > ------------------------------------------
> > > > <identity impersonate="false" />
> > > >
> > > > <authentication mode="Windows" />
> > > > <authorization>
> > > > <deny users="?" />
> > > > </authorization>
> > > >
> > > > <customErrors defaultRedirect="CustomError.aspx" mode="Off">
> > > > <error statusCode="401" redirect="Custom401.html"/>
> > > > </customErrors>
> > > > ------------------------------------------
> > > >
> > > > And everything goes fine for 99.9% users and not for one only, who

> > always
> > > > get a popup login window to login this website.
> > > > He has WinXP box, with latest browser, like many others, but for any
> > > reason
> > > > website cannot recognize that user as a valid internal user.
> > > >
> > > > Any ideas? Thank you
> > > >
> > > >
> > >
> > >

> >
> >

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
vs2005 publish website doing bad things, bad things =?Utf-8?B?V2lsbGlhbSBTdWxsaXZhbg==?= ASP .Net 1 10-25-2006 06:18 PM
ASP.NET does strange things =?Utf-8?B?R2FyeQ==?= ASP .Net 6 05-05-2005 11:20 AM
Validating SAX parser still reads whitespace/does strange things. badgerduke@gmail.com Java 1 01-07-2005 04:32 PM
IIS Security strange things Alexey Smirnov ASP .Net 4 03-03-2004 07:48 AM
OT: strange things that people search for Toby A Inkster HTML 10 02-09-2004 10:17 PM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57