« Previous Next »

• 09-25-2009, 7:47 AM

  WaterWolf12345 Joined on 04-02-2007, 10:07 AM Posts 5

  Windows Authentication Failing in IIS with IE8 Reply Contact I have a Windows 2003 machine running IIS and I have set up a test website which has Integrated Windows Authentication enabled on it. I then try to access this website from another machine in the same domain. I am logged into this machine with my domain account. Using IE8, if I have the 'Enable Integrated Windows Authentication' setting checked then it will popup the username and password dialogue but after three attempts at entering my domain username and password it is showing me a 401.1 error. If I disable this setting then it lets me into the test website straight away. I am able to log into the machine running the website as an admin with my domain account. I need to be able to access the website with  'Enable Integrated Windows Authentication' checked as this is the default. I'm not sure where to begin to look for a solution to this problem, I understand that it may be something to do with Kerberos but I know absolutely nothing about that! Does anyone have any suggestions as to what I should be looking for?

  Tags: windows authentication401.1windows 2003enable integrated windows authentication

• 09-25-2009, 8:13 AM

  In reply to

  jeff@zina.com Joined on 09-26-2003, 10:43 AM Naples, FL, USA Posts 2,093	Re: Windows Authentication Failing in IIS with IE8 Reply Contact In IE, add your website's domain to the Intranet zone in the Security tab. Jeff Look for Wrox's new book Professional IIS 7 in your local bookstore, or order now at Amazon.com

• 09-25-2009, 8:22 AM

  In reply to

  WaterWolf12345 Joined on 04-02-2007, 10:07 AM Posts 5	Re: Windows Authentication Failing in IIS with IE8 Reply Contact  That doesn't seem to have made a difference, the site was being picked up automatically as being local intranet already...

• 09-25-2009, 10:25 AM

  In reply to

  tomkmvp Joined on 03-20-2003, 10:27 AM Central NJ Posts 6,187

  Re: Windows Authentication Failing in IIS with IE8 Reply Contact A 401.1 response means IIS was unable to authenticate the user.  This typically happens because of a bad username or password, or because IIS can't reach the domain that the user belongs to. Tom Kaminski IIS MVP http://mvp.support.microsoft.com/ http://blogs.iis.net/tomkmvp/ http://www.linkedin.com/pub/8/690/408 http://www.bluesrepublic.org/

• 09-25-2009, 10:30 AM

  In reply to

  WaterWolf12345 Joined on 04-02-2007, 10:07 AM Posts 5	Re: Windows Authentication Failing in IIS with IE8 Reply Contact  Is there a way of testing if IIS can reach the domain? Does the application pool identity need to be a user within the domain?

• 09-25-2009, 11:40 AM

  In reply to

  WaterWolf12345 Joined on 04-02-2007, 10:07 AM Posts 5

  Re: Windows Authentication Failing in IIS with IE8 Reply Contact Okay, I enabled kerberos logging as per this article: http://support.microsoft.com/?kbid=262177 There's now a couple of kerberos error messages in my event log, I don't know if they were caused by IIS or not.  Error Code: 0xd KDC_ERR_BADOPTION and  Error Code: 0xd KDC_ERR_BADOPTION. I'll have to see if I can figure out what they mean.

  Tags: windows authenticationkerberosInternet ExplorerIENTLMenable integrated windows authenticationlogskerberos error code

• 09-25-2009, 4:09 PM

  In reply to

  Paul Lynch Joined on 05-24-2006, 5:41 AM UK Posts 1,235	Re: Windows Authentication Failing in IIS with IE8 Reply Contact Hi, What is your application pool identity ? And what is the URL you are using to access your web site ? Regards, Paul Lynch | www.iisadmin.co.uk

• 09-25-2009, 9:09 PM

  In reply to

  lextm Joined on 10-22-2008, 4:18 AM Shanghai, PRC Posts 1,373

  Re: Windows Authentication Failing in IIS with IE8 Reply Contact Then you'd better check if there is any related failure audit item in Security event log. If so, yes AD failed to authenticate your user name and password for IIS, and you need to consult AD experts on that. Lex Li Support Engineer at Microsoft --------------------------- This posting is provided "AS IS" with no warranties, and confers no rights.

• 09-28-2009, 8:00 AM

  In reply to

  WaterWolf12345 Joined on 04-02-2007, 10:07 AM Posts 5

  Re: Windows Authentication Failing in IIS with IE8 Reply Contact The application pool identity is currently setup to be a local user who is a member of IIS_WPG. Perhaps a domain user would be better? There does not appear to be any authentication failure messages in the security section of Event Viewer. I was accessing the machine using the network name of the machine. I notice now that if I use the IP address of the machine that it appears to work okay although it still popups a login dialogue rather than being automatic login. I asked someone else to try accessing the machine and they noticed that after the first login attempt, if they repeatedly click 'cancel' on the popup that they eventually get into the site....

• 09-28-2009, 8:26 AM

  In reply to

  virendra_Giz Joined on 09-28-2009, 12:22 PM Posts 2	Re: Windows Authentication Failing in IIS with IE8 Reply Contact Hi WaterWolf12345, I just gone through this post and as per me you should use a Service account for your test site app.pool Service account must be created in same domain from where you want to access your site.   Thnkas, Virendra..
  	Tags: web applicationiis6website secure and unsecure access

• 09-28-2009, 12:51 PM

  In reply to

  Paul Lynch Joined on 05-24-2006, 5:41 AM UK Posts 1,235	Re: Windows Authentication Failing in IIS with IE8 Reply Contact WaterWolf12345: The application pool identity is currently setup to be a local user who is a member of IIS_WPG.   That's the problem. How are you addresing this application ? In other words what are you typing into your browser's address bar to open this web application ? Regards, Paul Lynch | www.iisadmin.co.uk