Welcome to HostingForumz.com!
FAQFAQ   SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log in/Register/PasswordLog in/Register/Password

Negoaite Authentication failing on Vista IIS7

  
   Web Hosting Problem Solving Community! (Home) -> IIS RSS
Related Topics:
ASP Classic Failing Simple Test In IIS7 (Vista Business Ed.) - When I try to run: IIS 7 Testing Page w/ ASP Classic Today's date is <% %> as a .asp file, I get the following error: HTTP/1.1 New..

IIS7, WAS, Vista 5308 - Has anyone been able to get IIS working in Vista build 5308? I've been able to install IIS and whatnot through the command line in the Release Notes Addendum, however (twice now under two different setups) I am unable to start W3SVC. This is because.

IIS7 and Vista - With IIS 5 and 6 I could access the local web server on my machine by typing my machine's name in the browser. With IIS7 in Vista Ultimate the local machine name does not work. The local machine IP works. Using works. Even using my machine ..

IIS7 and Vista - With IIS 5 and 6 I could access the local web server on my machine by typing my machine's name in the browser. With IIS7 in Vista Ultimate the local machine name does not work. The local machine IP works. Using works. Even using my machine..

IIS7 and Vista - With IIS 5 and 6 I could access the local web server on my machine by typing my machine's name in the browser. With IIS7 in Vista Ultimate the local machine name does not work. The local machine IP works. Using works. Even using my machine..
Next:  IIS: DefaultAppPool Terminates unexpectedly  
Author Message
Brad

External


Since: Dec 14, 2006
Posts: 6



(Msg. 1) Posted: Tue Feb 26, 2008 2:35 pm
Post subject: Negoaite Authentication failing on Vista IIS7
Archived from groups: microsoft>public>inetserver>iis (more info?)
I'm an in-house dotnet developer using IIS7 on Vista Ultimate. I have multiple local webs running under IIS, all share
the same 120.0.0.1 loopback ip address with hostheaders to identify the webs. ASP.Net web sites on these webs require
windows authentication. I have found that with authenticaiton set to either "Negotiate" or "Negotiate, NTLM",
authentication fails: it does not matter if I access the web site using IE, or code with credentials to access a web
service or if I used a domain account or local account. If I set authentication only to "NTLM" then authentication
succeeds.

I don't understand why Kerberos authentication might fail locally, but even so shouldn't "Negotiate" let authentication
fail over to NTLM? If that is true then why would setting it specifically to "NTLM" succeed? Yes, I have windows
authentication set in IIS and the user accounts (and iis_users) have access to the folders. And I am changing the
authentication mode using adsutil. And for what it's worth I did not have this problem when my workstations was win2003
with IIS6.

 >> Stay informed about: Negoaite Authentication failing on Vista IIS7 
Back to top
Login to vote
"Lognoul, Marc

External


Since: Feb 05, 2008
Posts: 21



(Msg. 2) Posted: Wed Feb 27, 2008 7:55 am
Post subject: Re: Negoaite Authentication failing on Vista IIS7 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Since kerberos (via negotiate) relies on names and you use host headers,
each names in host header should be linked to the system running iis.

Here are the details: http://support.microsoft.com/kb/929650/en-us

Marc

"Brad" <lane.TakeThisOut@newsgroup.nospam> wrote in message
news:306FE3CA-01E8-4848-8C7B-43FFCCB7D056@microsoft.com...
> I'm an in-house dotnet developer using IIS7 on Vista Ultimate. I have
> multiple local webs running under IIS, all share the same 120.0.0.1
> loopback ip address with hostheaders to identify the webs. ASP.Net web
> sites on these webs require windows authentication. I have found that
> with authenticaiton set to either "Negotiate" or "Negotiate, NTLM",
> authentication fails: it does not matter if I access the web site using
> IE, or code with credentials to access a web service or if I used a domain
> account or local account. If I set authentication only to "NTLM" then
> authentication succeeds.
>
> I don't understand why Kerberos authentication might fail locally, but
> even so shouldn't "Negotiate" let authentication fail over to NTLM? If
> that is true then why would setting it specifically to "NTLM" succeed?
> Yes, I have windows authentication set in IIS and the user accounts (and
> iis_users) have access to the folders. And I am changing the
> authentication mode using adsutil. And for what it's worth I did not have
> this problem when my workstations was win2003 with IIS6.
>
>

 >> Stay informed about: Negoaite Authentication failing on Vista IIS7 
Back to top
Login to vote
WenJun Zhang[msft]

External


Since: Dec 16, 2005
Posts: 229



(Msg. 3) Posted: Thu Feb 28, 2008 11:31 am
Post subject: Re: Negoaite Authentication failing on Vista IIS7 [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Hi Brad,

I suggest you use webfetch to trace the rawdata of http request/response to
determine what the exact error is for Kerberos auth.

HOW TO: Use Wfetch.exe to Troubleshoot HTTP Connections
http://support.microsoft.com/default.aspx?scid=kb;en-us;284285

To use, please input:

Host: (The site's domainname/hostheader or servername or just IP address)
Port: (The site's port number if it isn't using the default 80)
Path: (The relative path of your page. e.g: /index.htm)
Auth: (Select Negotiate and specify proper domain user credential)

Press Go! to issue a http request to the server and check what error is
returned in the response. If it's related to SPN setting, you should see an
error like:

0x80090322 (The target principal name is incorrect.): Unable to
InitializeSecurityContext

Look forward to your update.

Have a nice day.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

==================================================

Get notification to my posts through email? Please refer to:
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at:

http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
 >> Stay informed about: Negoaite Authentication failing on Vista IIS7 
Back to top
Login to vote
Display posts from previous:   
   Web Hosting Problem Solving Community! (Home) -> IIS All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]