ARR Windows authentication fails after sometimeRSS

3 replies

Last post Aug 02, 2016 06:21 AM by Jean Sun

  • ARR Windows authentication fails after sometime

    Jul 27, 2016 08:08 PM|rajivharris2|LINK

    Similar issue:  http://forums.iis.net/p/1167702/1943566.aspx

    ARR server has anonymous authentication and the internal server has windows authentication configured. The reverse proxy works fine for some time (~3 hrs) , and then it starts asking for credentials. It fails even when we pass in the correct credentials.

    Failed Request Tracing shows the request properly hitting the internal server but this time it asks for credentials. When IIS is reset in ARR server it starts working again for sometime.

    ARR server:

    IIS 7 , ARR v3, URL Rewrite, Anonymous authentication

    Internal server:

    IIS 8, Windows authentication

    Thanks,

    Rajiv

  • Re: ARR Windows authentication fails after sometime

    Jul 28, 2016 01:55 AM|Jean Sun|LINK

    Hi,

    Please try using failed request tracing on your internal server for more information about this issue.

    Best Regards,

    Jean

    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue.
    If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.
  • Re: ARR Windows authentication fails after sometime

    Jul 28, 2016 03:32 PM|rajivharris2|LINK

    Hi Jean,

    I see the remoteUserName, userName,tokenUserName is missing in the failing request.  It starts working again when I do the IIS reset.

    Success request:

    <failedRequest url="http://internalserver:80/test/test.aspx"
    siteId="1"
    appPoolId="Default Web Site"
    processId="7600"
    verb="GET"
    remoteUserName="Domain\username"
    userName="Domain\username"
    tokenUserName="Domain\username"
    authenticationType="Negotiate"
    activityId="{8000016A-0000-F300-B63F-84710C7967BB}"
    failureReason="STATUS_CODE"
    statusCode="200"
    triggerStatusCode="200"
    timeTaken="219"
    xmlns:freb="http://schemas.microsoft.com/win/2006/06/iis/freb"
    >

    Failing Request:

    <failedRequest url="http://internalserver:80/test/test.aspx"
    siteId="1"
    appPoolId="Default Web Site"
    processId="7600"
    verb="GET"
    authenticationType="NOT_AVAILABLE"
    activityId="{80000360-0000-FA00-B63F-84710C7967BB}"
    failureReason="STATUS_CODE"
    statusCode="401.1"
    triggerStatusCode="401.1"
    timeTaken="0"
    xmlns:freb="http://schemas.microsoft.com/win/2006/06/iis/freb"
    >

    Thanks,

    Rajiv

  • Re: ARR Windows authentication fails after sometime

    Aug 02, 2016 06:21 AM|Jean Sun|LINK

    Hi,

    authenticationType="NOT_AVAILABLE" 

    Do you use shared configuration? Or use ARR to proxy some requests to IIS 6?

    Best Regards,

    Jean

    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue.
    If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.