Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Unexpected 401.5 error. Authentication header changed to Kerberos??

$
0
0

Hi,

This problem seems to exist on a specific server. All other servers are working ok.

Background: The website is basically Forms Auth but there's an asmx that manually requires Basic Auth.

I have two C# client.

1. When invoking using SOAP (asmx client proxy) with basic auth credentials - all is well.

2. When invoking using WebClient or WebRequest with the same basic auth credentials, I get 401.5.

3. The folders have "Everyone" set to them.

When setting up iis trace, I see a very weird behavior. The request arrives with the correct Basic auth header. But further down the trace I see the following:

GENERAL_REQUEST_HEADERS

Headers="Connection: Keep-Alive
Content-Length: 68
Content-Type: application/json
Authorization: Kerberos
Expect: 100-continue
Host: 1.2.3.4


The Kerberos seems very weird. It is as if the request headers changed throughout the process, and perhaps that explains the 401.5.

Again, I would like to stress out that on other servers there's no problem with both clients. The only difference I can think of is that the problematic server is a DC. But if that is a problem then why is the SOAP client working well?

Any ideas?


Viewing all articles
Browse latest Browse all 1881

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>