|
Related Topics:
| IIS Authentication Question - I'm new to IIS and had a few questions regarding the methods provided by IIS. I have a web server joined to Active Directory and want for users that exist in AD. However, I don't want them to have to put in
authentication Via Active directory . - I have to create an intranet site for my domain user only. I don’t want to give anonymous access .that why I remove the anonymous user and keep it as basic .and tried Digest also. But the problem is still as on. Our if..
Authentication via NTLM instead of Kerberos - We currently have an issue whereby certain people can't to a website (hosted by IIS via kerberos, in fact they can't at all. Most people just open IE and browse to the site, some people however get prompted with..
Integrated Windows Authentication - Double Hits - Looking at the IIS 6 log files we have noticed that for every click a user makes for a resource, 2 hits (and thus 2 round trips to the server) are made: 1) Anonymous request with response status 401 RESPONSE Header is: HTTP/1.1 401
Negoaite Authentication failing on Vista IIS7 - I'm an in-house dotnet developer using IIS7 on Vista Ultimate. I have multiple local webs running under IIS, all share the same 120.0.0.1 loopback ip address with to identify the webs. ASP.Net web sites on these webs require windows..
|
|
|
Next: SQL Injection
|
| Author |
Message |
External
Since: Feb 04, 2008
Posts: 3
|
(Msg. 1) Posted: Mon Feb 04, 2008 11:38 am
Post subject: Problem With AD passthrough authentication to SQL Server from IIS
Archived from groups: microsoft>public>inetserver>iis (more info?)
|
|
|
Everyone,
I have a problem with getting a website up and running. My company has an AD
setup, I've created a security group in AD that will control access to the
database and website. That AD group was added to the SQL Server 2005 login,
and security tabs no problem. I've added a DNS short name to allow users to
access the site and the IIS instance has it's own internal IP as well.
Anyways, to the question, when someone hits the website, I get Anonymous
login failure, which means I'm not getting the AD passthrough to the SQL
Server. Interesting, but not the weirdest part, I add the DNS address to the
proxy exception list, and it works no problem. So it's not a coding issue, or
anything like that. I then tried the IP address of the IIS instance, a
10.xx.xx.xx-thing, and same problem anonymous login failure, tried the fix
for the exception list with the internal IP, and it works again. Why would
the request be going through a proxy if it's a DNS shortname on our network,
and also an internal IP shouldn't go through a proxy either. Yes, I've
checked my IE do not use proxy for local addresses. Still no luck.
Help....
Robert |
|
| Back to top |
|
 | |
External
Since: Aug 23, 2003
Posts: 3041
|
(Msg. 2) Posted: Tue Feb 05, 2008 3:04 am
Post subject: Re: Problem With AD passthrough authentication to SQL Server from IIS [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
This is not an IIS issue then is it? it's a browser/proxy configuration
issue...
Cheers
Ken
"rclowser" <rclowser.DeleteThis@discussions.microsoft.com> wrote in message
news:4A969DD2-FA46-45DE-BCD6-C2585C913201@microsoft.com...
> Everyone,
>
> I have a problem with getting a website up and running. My company has an
> AD
> setup, I've created a security group in AD that will control access to the
> database and website. That AD group was added to the SQL Server 2005
> login,
> and security tabs no problem. I've added a DNS short name to allow users
> to
> access the site and the IIS instance has it's own internal IP as well.
> Anyways, to the question, when someone hits the website, I get Anonymous
> login failure, which means I'm not getting the AD passthrough to the SQL
> Server. Interesting, but not the weirdest part, I add the DNS address to
> the
> proxy exception list, and it works no problem. So it's not a coding issue,
> or
> anything like that. I then tried the IP address of the IIS instance, a
> 10.xx.xx.xx-thing, and same problem anonymous login failure, tried the fix
> for the exception list with the internal IP, and it works again. Why would
> the request be going through a proxy if it's a DNS shortname on our
> network,
> and also an internal IP shouldn't go through a proxy either. Yes, I've
> checked my IE do not use proxy for local addresses. Still no luck.
>
> Help....
>
> Robert |
|
| Back to top |
|
| |
External
Since: Feb 04, 2008
Posts: 3
|
(Msg. 3) Posted: Tue Feb 05, 2008 4:04 am
Post subject: Re: Problem With AD passthrough authentication to SQL Server from [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
True, but I didn't find a proxy group listed under MSDN. This is as close as
I could get.
Robert
"Ken Schaefer" wrote:
> This is not an IIS issue then is it? it's a browser/proxy configuration
> issue...
>
> Cheers
> Ken
>
>
> "rclowser" <rclowser.RemoveThis@discussions.microsoft.com> wrote in message
> news:4A969DD2-FA46-45DE-BCD6-C2585C913201@microsoft.com...
> > Everyone,
> >
> > I have a problem with getting a website up and running. My company has an
> > AD
> > setup, I've created a security group in AD that will control access to the
> > database and website. That AD group was added to the SQL Server 2005
> > login,
> > and security tabs no problem. I've added a DNS short name to allow users
> > to
> > access the site and the IIS instance has it's own internal IP as well.
> > Anyways, to the question, when someone hits the website, I get Anonymous
> > login failure, which means I'm not getting the AD passthrough to the SQL
> > Server. Interesting, but not the weirdest part, I add the DNS address to
> > the
> > proxy exception list, and it works no problem. So it's not a coding issue,
> > or
> > anything like that. I then tried the IP address of the IIS instance, a
> > 10.xx.xx.xx-thing, and same problem anonymous login failure, tried the fix
> > for the exception list with the internal IP, and it works again. Why would
> > the request be going through a proxy if it's a DNS shortname on our
> > network,
> > and also an internal IP shouldn't go through a proxy either. Yes, I've
> > checked my IE do not use proxy for local addresses. Still no luck.
> >
> > Help....
> >
> > Robert
>
> >> Stay informed about: Problem With AD passthrough authentication to SQL Server f.. |
|
| Back to top |
|
| |
External
Since: Aug 23, 2003
Posts: 3041
|
(Msg. 4) Posted: Tue Feb 05, 2008 9:04 pm
Post subject: Re: Problem With AD passthrough authentication to SQL Server from [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
It doesn't even look like a proxy issue - the issue seems to be in your
browser configuration (you need to find out why it's going to the proxy in
certain situations). If the browser is IE, then try an IE newsgroup.
Cheers
Ken
"rclowser" <rclowser.DeleteThis@discussions.microsoft.com> wrote in message
news:4FD6449A-7BD2-4221-B23D-ECA033073968@microsoft.com...
> True, but I didn't find a proxy group listed under MSDN. This is as close
> as
> I could get.
>
> Robert
>
> "Ken Schaefer" wrote:
>
>> This is not an IIS issue then is it? it's a browser/proxy configuration
>> issue...
>>
>> Cheers
>> Ken
>>
>>
>> "rclowser" <rclowser.DeleteThis@discussions.microsoft.com> wrote in message
>> news:4A969DD2-FA46-45DE-BCD6-C2585C913201@microsoft.com...
>> > Everyone,
>> >
>> > I have a problem with getting a website up and running. My company has
>> > an
>> > AD
>> > setup, I've created a security group in AD that will control access to
>> > the
>> > database and website. That AD group was added to the SQL Server 2005
>> > login,
>> > and security tabs no problem. I've added a DNS short name to allow
>> > users
>> > to
>> > access the site and the IIS instance has it's own internal IP as well.
>> > Anyways, to the question, when someone hits the website, I get
>> > Anonymous
>> > login failure, which means I'm not getting the AD passthrough to the
>> > SQL
>> > Server. Interesting, but not the weirdest part, I add the DNS address
>> > to
>> > the
>> > proxy exception list, and it works no problem. So it's not a coding
>> > issue,
>> > or
>> > anything like that. I then tried the IP address of the IIS instance, a
>> > 10.xx.xx.xx-thing, and same problem anonymous login failure, tried the
>> > fix
>> > for the exception list with the internal IP, and it works again. Why
>> > would
>> > the request be going through a proxy if it's a DNS shortname on our
>> > network,
>> > and also an internal IP shouldn't go through a proxy either. Yes, I've
>> > checked my IE do not use proxy for local addresses. Still no luck.
>> >
>> > Help....
>> >
>> > Robert
>>
>> >> Stay informed about: Problem With AD passthrough authentication to SQL Server f.. |
|
| Back to top |
|
| |
External
Since: Feb 04, 2008
Posts: 3
|
(Msg. 5) Posted: Tue Feb 05, 2008 9:04 pm
Post subject: Re: Problem With AD passthrough authentication to SQL Server from [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
I've had 10 people throughout the company on different coasts of the US try
it. It happens exactly the same on all of them. So I think it is a proxy
issue.
Robert
"Ken Schaefer" wrote:
> It doesn't even look like a proxy issue - the issue seems to be in your
> browser configuration (you need to find out why it's going to the proxy in
> certain situations). If the browser is IE, then try an IE newsgroup.
>
> Cheers
> Ken
>
>
> "rclowser" <rclowser.TakeThisOut@discussions.microsoft.com> wrote in message
> news:4FD6449A-7BD2-4221-B23D-ECA033073968@microsoft.com...
> > True, but I didn't find a proxy group listed under MSDN. This is as close
> > as
> > I could get.
> >
> > Robert
> >
> > "Ken Schaefer" wrote:
> >
> >> This is not an IIS issue then is it? it's a browser/proxy configuration
> >> issue...
> >>
> >> Cheers
> >> Ken
> >>
> >>
> >> "rclowser" <rclowser.TakeThisOut@discussions.microsoft.com> wrote in message
> >> news:4A969DD2-FA46-45DE-BCD6-C2585C913201@microsoft.com...
> >> > Everyone,
> >> >
> >> > I have a problem with getting a website up and running. My company has
> >> > an
> >> > AD
> >> > setup, I've created a security group in AD that will control access to
> >> > the
> >> > database and website. That AD group was added to the SQL Server 2005
> >> > login,
> >> > and security tabs no problem. I've added a DNS short name to allow
> >> > users
> >> > to
> >> > access the site and the IIS instance has it's own internal IP as well.
> >> > Anyways, to the question, when someone hits the website, I get
> >> > Anonymous
> >> > login failure, which means I'm not getting the AD passthrough to the
> >> > SQL
> >> > Server. Interesting, but not the weirdest part, I add the DNS address
> >> > to
> >> > the
> >> > proxy exception list, and it works no problem. So it's not a coding
> >> > issue,
> >> > or
> >> > anything like that. I then tried the IP address of the IIS instance, a
> >> > 10.xx.xx.xx-thing, and same problem anonymous login failure, tried the
> >> > fix
> >> > for the exception list with the internal IP, and it works again. Why
> >> > would
> >> > the request be going through a proxy if it's a DNS shortname on our
> >> > network,
> >> > and also an internal IP shouldn't go through a proxy either. Yes, I've
> >> > checked my IE do not use proxy for local addresses. Still no luck.
> >> >
> >> > Help....
> >> >
> >> > Robert
> >>
> >>
>
> >> Stay informed about: Problem With AD passthrough authentication to SQL Server f.. |
|
| Back to top |
|
| |
External
Since: Aug 23, 2003
Posts: 3041
|
(Msg. 6) Posted: Tue Feb 05, 2008 9:04 pm
Post subject: Re: Problem With AD passthrough authentication to SQL Server from [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
Also, if I can add, this isn't an IIS issue.
If you really think that this isn't a browser configuration issue, but a
proxy issue, then shouldn't you be asking for support in a forum for
whatever proxy software you are using?
Cheers
Ken
"rclowser" <rclowser.TakeThisOut@discussions.microsoft.com> wrote in message
news:D67B55F5-ACF0-425D-A5C4-50DCA34E516B@microsoft.com...
> I've had 10 people throughout the company on different coasts of the US
> try
> it. It happens exactly the same on all of them. So I think it is a proxy
> issue.
>
> Robert
>
> "Ken Schaefer" wrote:
>
>> It doesn't even look like a proxy issue - the issue seems to be in your
>> browser configuration (you need to find out why it's going to the proxy
>> in
>> certain situations). If the browser is IE, then try an IE newsgroup.
>>
>> Cheers
>> Ken
>>
>>
>> "rclowser" <rclowser.TakeThisOut@discussions.microsoft.com> wrote in message
>> news:4FD6449A-7BD2-4221-B23D-ECA033073968@microsoft.com...
>> > True, but I didn't find a proxy group listed under MSDN. This is as
>> > close
>> > as
>> > I could get.
>> >
>> > Robert
>> >
>> > "Ken Schaefer" wrote:
>> >
>> >> This is not an IIS issue then is it? it's a browser/proxy
>> >> configuration
>> >> issue...
>> >>
>> >> Cheers
>> >> Ken
>> >>
>> >>
>> >> "rclowser" <rclowser.TakeThisOut@discussions.microsoft.com> wrote in message
>> >> news:4A969DD2-FA46-45DE-BCD6-C2585C913201@microsoft.com...
>> >> > Everyone,
>> >> >
>> >> > I have a problem with getting a website up and running. My company
>> >> > has
>> >> > an
>> >> > AD
>> >> > setup, I've created a security group in AD that will control access
>> >> > to
>> >> > the
>> >> > database and website. That AD group was added to the SQL Server 2005
>> >> > login,
>> >> > and security tabs no problem. I've added a DNS short name to allow
>> >> > users
>> >> > to
>> >> > access the site and the IIS instance has it's own internal IP as
>> >> > well.
>> >> > Anyways, to the question, when someone hits the website, I get
>> >> > Anonymous
>> >> > login failure, which means I'm not getting the AD passthrough to the
>> >> > SQL
>> >> > Server. Interesting, but not the weirdest part, I add the DNS
>> >> > address
>> >> > to
>> >> > the
>> >> > proxy exception list, and it works no problem. So it's not a coding
>> >> > issue,
>> >> > or
>> >> > anything like that. I then tried the IP address of the IIS instance,
>> >> > a
>> >> > 10.xx.xx.xx-thing, and same problem anonymous login failure, tried
>> >> > the
>> >> > fix
>> >> > for the exception list with the internal IP, and it works again. Why
>> >> > would
>> >> > the request be going through a proxy if it's a DNS shortname on our
>> >> > network,
>> >> > and also an internal IP shouldn't go through a proxy either. Yes,
>> >> > I've
>> >> > checked my IE do not use proxy for local addresses. Still no luck.
>> >> >
>> >> > Help....
>> >> >
>> >> > Robert
>> >>
>> >>
>>
>> >> Stay informed about: Problem With AD passthrough authentication to SQL Server f.. |
|
| Back to top |
|
| |
External
Since: Aug 23, 2003
Posts: 3041
|
(Msg. 7) Posted: Tue Feb 05, 2008 9:04 pm
Post subject: Re: Problem With AD passthrough authentication to SQL Server from [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
But the issue appears to be "why is the browser going to the proxy server,
when it should be going directly to the server in question" (Kerberos is not
going to work through your proxy without additinal configuraion), so you
need to bypass the proxy).
So, I would check your auto-configuration options (e.g. if you are using
WPAD to autoconfigure the clients), or any other method you are using for
auto-configuring your browser's proxy configuration information.
Cheers
Ken
"rclowser" <rclowser.RemoveThis@discussions.microsoft.com> wrote in message
news:D67B55F5-ACF0-425D-A5C4-50DCA34E516B@microsoft.com...
> I've had 10 people throughout the company on different coasts of the US
> try
> it. It happens exactly the same on all of them. So I think it is a proxy
> issue.
>
> Robert
>
> "Ken Schaefer" wrote:
>
>> It doesn't even look like a proxy issue - the issue seems to be in your
>> browser configuration (you need to find out why it's going to the proxy
>> in
>> certain situations). If the browser is IE, then try an IE newsgroup.
>>
>> Cheers
>> Ken
>>
>>
>> "rclowser" <rclowser.RemoveThis@discussions.microsoft.com> wrote in message
>> news:4FD6449A-7BD2-4221-B23D-ECA033073968@microsoft.com...
>> > True, but I didn't find a proxy group listed under MSDN. This is as
>> > close
>> > as
>> > I could get.
>> >
>> > Robert
>> >
>> > "Ken Schaefer" wrote:
>> >
>> >> This is not an IIS issue then is it? it's a browser/proxy
>> >> configuration
>> >> issue...
>> >>
>> >> Cheers
>> >> Ken
>> >>
>> >>
>> >> "rclowser" <rclowser.RemoveThis@discussions.microsoft.com> wrote in message
>> >> news:4A969DD2-FA46-45DE-BCD6-C2585C913201@microsoft.com...
>> >> > Everyone,
>> >> >
>> >> > I have a problem with getting a website up and running. My company
>> >> > has
>> >> > an
>> >> > AD
>> >> > setup, I've created a security group in AD that will control access
>> >> > to
>> >> > the
>> >> > database and website. That AD group was added to the SQL Server 2005
>> >> > login,
>> >> > and security tabs no problem. I've added a DNS short name to allow
>> >> > users
>> >> > to
>> >> > access the site and the IIS instance has it's own internal IP as
>> >> > well.
>> >> > Anyways, to the question, when someone hits the website, I get
>> >> > Anonymous
>> >> > login failure, which means I'm not getting the AD passthrough to the
>> >> > SQL
>> >> > Server. Interesting, but not the weirdest part, I add the DNS
>> >> > address
>> >> > to
>> >> > the
>> >> > proxy exception list, and it works no problem. So it's not a coding
>> >> > issue,
>> >> > or
>> >> > anything like that. I then tried the IP address of the IIS instance,
>> >> > a
>> >> > 10.xx.xx.xx-thing, and same problem anonymous login failure, tried
>> >> > the
>> >> > fix
>> >> > for the exception list with the internal IP, and it works again. Why
>> >> > would
>> >> > the request be going through a proxy if it's a DNS shortname on our
>> >> > network,
>> >> > and also an internal IP shouldn't go through a proxy either. Yes,
>> >> > I've
>> >> > checked my IE do not use proxy for local addresses. Still no luck.
>> >> >
>> >> > Help....
>> >> >
>> >> > Robert
>> >>
>> >>
>>
>> >> Stay informed about: Problem With AD passthrough authentication to SQL Server f.. |
|
| Back to top |
|
| |
|
FAQ
Search
Profile
Private Messages
Log in
