We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

401 error [Answered]RSS

12 replies

Last post Apr 28, 2009 05:13 PM by LISpeedyG

  • 401 error

    Apr 26, 2009 04:40 PM|LISpeedyG|LINK

    Hi,

    I have been trying to resolve the followign issue for a number of days and have, so far, been unsucessful.  Ok, here is some very strange behavior.  And, any help[ or direction would be very much appreciated.:

    1. Background
      1. I am currently running Server 2003 with IIS6 and SharePoint 2007
      2. I use the SP front end server to both develop and deploy most of my InfoPath Admin deployed forms.
      3. The forms that are deployed are currently being consumed thru an external facing website.  This website is accessible by only authorized users that are authenticated thru Active Directory.
      4. All has been working perfectly until recently. 
      5. I was able to develop these forms and deploy them from the InfoPath wizard to an external IP where they are eventually consumed.
    1. Currently on the Front end Web Server:
      1. I am no longer able to log into the external facing IP addresses to the SP sites.  In trying to connect to these sites I receive an HTTP 401.  The following is an excerpt from the IIS log with the error:

    2009-04-24 17:58:32 W3SVC1994479640 192.168.1.165 GET /Sites/XXXXX/ - 3335 - external_ip Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+GTB5;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+InfoPath.2;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 2 2148074254

    2009-04-24 17:58:32 W3SVC1994479640 192.168.1.165 GET /Sites/XXXXX/ - 3335 - external_ip Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+GTB5;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+InfoPath.2;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 1 0

    1. I can, however, log into the same site thru the internal domain.  Unfortunately, I can no longer develop InfoPath forms that are consumable from an external facing IP without access to the external IP from the server.
    2. Interestingly, I can still access the external IP from Firefox on the same server.
    3. I can no longer deploy forms using the external web address and associated DB/SP list links.  So, forms functionality becomes unusable from external web addresses.
    4. Also, I can still access the external site from the backend SQL Server on the same domain as the Web Server.  Note that this SQL server has 8 pending updates that have been applied to the WebServer, i.e. KB:
      1. 963027
      2. 923561
      3. 952004
      4. 956572
      5. 959426
      6. 960803
      7. 961373
      8. 890830

     

    1. I have checked the FAQ's for all the pending updates but have not been able to find any relevant IIS issues with Server 2003.

     Thanks,

    Gus

    authentication 401 windows authentication iis 6 credentials IE NTLM access

  • Re: 401 error

    Apr 26, 2009 10:12 PM|lextm|LINK

    Not sure if this is a SharePoint or InfoPath configuration problem. Can you consult the SharePoint and InfoPath experts first?

    http://forums.microsoft.com/MSDN/default.aspx?siteid=1&ForumGroupID=328

    Lex Li
    Want to have a chat on the issues you meet? Book an appointment at https://buy.stripe.com/cN24ia0yi7sAdIA7sv
    ---------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.
  • Re: 401 error

    Apr 27, 2009 09:10 AM|LISpeedyG|LINK

    Hi,

    Thanks for your reply.. 

    I have placed the same problem description on the InfoPath Forum.  But, I don't seem to be getting any interest in the question..  Are there some methods I can use to debug that might lead me to a solution?  I have been working on tryng to resolve this for a few days now with no success..

     Thanks,

    Gus

  • Re: 401 error

    Apr 27, 2009 09:58 AM|tomkmvp|LINK

    A 401 1 means that IIS was unable to authenticate the user, either because of a bad username or bad password, or perhaps it could not find the user in any of the directories it has access to authenticate against.  Has anything changed that would affect the ability to reach AD in the target domain?

  • Re: 401 error

    Apr 27, 2009 10:06 AM|LISpeedyG|LINK

    Hi Tom,

    Thanks for the reply..

    The only things that have changed is that the patches were applied..

    As I mentioned, I am able to authenticate using the local web address but not using the external address..  Also, as I mentioned, I am able to authenticate usin the back end server in the same domain.

    The most curious part of all this is that I am able to authenticate with FireFox both locally as well as using the external IP..  Additionally, all other PC's both internal and external of the domain are able to authenticate using the external IP..

    Any help would be appreciated..

    Thanks

  • Re: 401 error

    Apr 27, 2009 10:11 AM|tomkmvp|LINK

    Are you specifying the domain name along with the username?

  • Re: 401 error

    Apr 27, 2009 10:16 AM|LISpeedyG|LINK

    Yes, I have provided the username alone as well as with the domain name..

    Also, I have just downloaded the IE viewer for Firefox.  And, once logged in using the standard FF browser.  I try to switch to IE viewer.  I get a new request to authenticate and it fails..

  • Re: 401 error

    Apr 27, 2009 10:35 AM|tomkmvp|LINK

    Anything relevant in the server's event logs?

  • Re: 401 error

    Apr 27, 2009 10:46 AM|LISpeedyG|LINK

    All the event viewers appear clean, i.e., no errors or warnings after authentication failure.

     BTW..  I noticed this same behaviour on a remote PC attempting to log on remotely.  The PC was using XP and IE7 recenlty patched.  Unfortunately, I do not know which/when patch was applied.

  • Re: 401 error

    Apr 27, 2009 10:20 PM|lextm|LINK

    If Security event log is empty, you may double check Local Security Policy.

    http://technet.microsoft.com/en-us/library/cc779526.aspx

    Make sure that account logon audit and logon audit have both Sucess and Failure turned on.

    Then you can reproduce this 401.1 error and check Security event log for failures.

    Lex Li
    Want to have a chat on the issues you meet? Book an appointment at https://buy.stripe.com/cN24ia0yi7sAdIA7sv
    ---------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.
  • Re: 401 error

    Apr 28, 2009 12:28 AM|LISpeedyG|LINK

    Thanks for the tip.

    The following is the error generated,  But, I have not been able to find relevant fixes.

    Event Type: Failure Audit

    Event Source: Security

    Event Category: Logon/Logoff

    Event ID: 537

    Date: 4/27/2009

    Time: 11:28:22 PM

    User: NT AUTHORITY\SYSTEM

    Computer: <DC NAME REMOVED>

    Description:

    Logon Failure:

    Reason: An error occurred during logon

    User Name: administrator

    Domain: <REMOVED>

    Logon Type: 3

    Logon Process: Èù

    Authentication Package: NTLM

    Workstation Name: <REMOVED>

    Status code: 0xC000006D

    Substatus code: 0x0

    Caller User Name: -

    Caller Domain: -

    Caller Logon ID: -

    Caller Process ID: -

    Transited Services: -

    Source Network Address: <EXTERNAL_IP REMOVED>

    Source Port: 1293

    Please let me know if you can help me further or point me in a possible direction.

  • Re: 401 error

    Apr 28, 2009 01:56 AM|lextm|LINK

    Just noticed this line.

    Logon Process: Èù

    Here is a KB article for your reference.

    http://support.microsoft.com/kb/896861

    Lex Li
    Want to have a chat on the issues you meet? Book an appointment at https://buy.stripe.com/cN24ia0yi7sAdIA7sv
    ---------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.
  • Re: 401 error

    Apr 28, 2009 05:13 PM|LISpeedyG|LINK

    Thank you very much for the guidance..

    I had actually found the article on a different site and had just resolved it as I saw your response.

    So, this was due to a recent security update..  It always intrigues me when issues like this one comes into play.  Unfortunately, they always seems to crop up when you are under a stress situation.  Or, do they themselves create the stress..

     

    Anyway, thank You all very much for the superb. help.

    Gus