« Previous Next »

Thread: Unable to open the Web...You are not authorized to perform the current operation

Last post 08-03-2007 10:07 AM by ssg31415926. 3 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (4 items)

Sort Posts:

  • 08-01-2007, 9:29 AM

    Unable to open the Web...You are not authorized to perform the current operation

    I can't edit my web - I get an IE authentication dialog and no credentials work and then I get the error: "Unable to open the Web http://server/appname.  You are not authorized to perform the current operation".  My account is a local admin on the server.

    Background:

    I'm using IIS6 on Win2003 R2 to host a few ASP.NET pages I've written.  I created the 'site' (not sure of the terminology - is it a virtual directory?) with VS2005 in the Default Web Site (which has FPSE configured).  The 'site' is configured to use an Application Pool which uses a network account, as it needs to query Active Directory.  The test site was working and the next step was to add security - I need to check the group membership of the user running the pages so I decided to uncheck the "Enable anonymous access" box - "Integrated Windows authentication" is selected.  Now, when I tried to access the pages, I got an IE authentication dialog which isn't what I wanted.  I did some research and discovered that with AppPools using network accounts, you need SPNs - the server had two, one which used the server name and one which used the fully qualified DNS server name, so I set up two similar SPNs for the App Pool account.  After this, the IE authentication dialog went away.

    Today, I went to make a change to a page and tried to open the site with Visual Studio.  Instead of it opening like normal, I got an IE authentication dialog.  I submitted my network credentials but it came straight back.  No other creds would work.  When I cancelled it, I got the error: "Unable to open the Web http://server/appname.  You are not authorized to perform the current operation".  The account with which I'm logged onto the workstation is a local admin on the server.

    The server is patched to a recent level.  I've tried rebooting it and my workstation.  I've tryed All tasks > Recalculate Server Extensions 2002 Web but I can't get past the IE authentication window that appears.  None of my IDs work (including Domain Admin).

  • 08-02-2007, 11:51 AM In reply to

    Re: Unable to open the Web...You are not authorized to perform the current operation

    I just had an idea: I created a new local account on the server and added it to Administrators.  Then I tried to open the web again, using Visual Studio 2005.  When it asked for credentials, I gave it the new local admin ID and it opened the web.

    So, it's suggesting that the server can't validate the creds it's passed.  I think I need a Windows security expert.  Any suggestions where I might find one?

  • 08-03-2007, 6:19 AM In reply to

    Re: Unable to open the Web...You are not authorized to perform the current operation

    I've confirmed that deleting the SPNs sets me back to where I was:

    • Accessing the page using IE puts up an Authentication dialog which refuses network creds (but allows a local admin on the server to see the page).
    • Opening the web with VS2005 works okay.
  • 08-03-2007, 10:07 AM In reply to

    Re: Unable to open the Web...You are not authorized to perform the current operation

    And to confirm, I've added back the SPN with the FQDN of the server and IE now works properly and VS2005 doesn't.

    The command I used was:

    setspn -a http/server.fqdn Domain\AppPoolAccountName

Page 1 of 1 (4 items)
Microsoft Communities