« Previous Next »

• 07-23-2008, 10:05 AM

  adm_cssd Joined on 07-23-2008, 1:02 PM Posts 1

  HTTP 401.3 - IIS 6 - accessing virtual directory - double hop? Reply Contact Hi, I have read similar posts on here to our issue but I don't think I have seen the exact same problem. We have an intranet under development which uses integrated windows authentication to obtain the user info etc. It has SSL (selfssl) and a virtual directory on a SAN where the documents and images are stored. In addition to restricting the resources available through the website front-end, we want to restrict any possible access by applying permissions on the folders on the SAN. All seems quite straight-forward but although we can navigate to the directory on the SAN through windows explorer and view documents ok, we cannot do so through the website - we are prompted for a login/password (seemingly ignoring windows authentication) and even this fails to allow us access - giving a 401.3 error. If I try to access documents via the website when logged into the webserver, the login box does not appear and the document is served correctly. Responses to other posts suggest that this ,might be a 'double hop' scenario where authentication is not being passed through to the SAN from the webserver, however the 401.3 error suggests authentication is working but there is some other permission issue. I have tried switching on basic auth but this seems to pop up the login box on accessing the site which is what we use windows auth to avoid. Can anybody shed any light on what the cause/solution may be? Many thanks.

• 07-23-2008, 1:27 PM

  In reply to

  tomkmvp Joined on 03-20-2003, 6:27 AM Central NJ Posts 6,183

  Re: HTTP 401.3 - IIS 6 - accessing virtual directory - double hop? Reply Contact adm_cssd: Responses to other posts suggest that this ,might be a 'double hop' scenario where authentication is not being passed through to the SAN from the webserver, however the 401.3 error suggests authentication is working but there is some other permission issue. Excellent point.  What permissions are set on the SAN content?  Are you using local or domaind accounts? adm_cssd: I have tried switching on basic auth but this seems to pop up the login box on accessing the site which is what we use windows auth to avoid. That's correct - but for troubleshooting purposes it will allow you to control what account is being used to logon. Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/