Hello,
in my ASP.NET intranet application that uses IIS7 and Windows-Authentication I usually have strange lines in the server log. It looks like this:
| time | s-ip | cs-method | cs-uri-stem | cs-uri-query | s-port | cs-username | c-ip | cs(User-Agent) | sc-status | sc-substatus | sc-win32-status | cs-bytes | time-taken |
| 13:27:19 | [IP2] | POST | [Path1] | - | 55555 | [Name1] | [IP1] | [User-Agent1] | 200 | 0 | 0 | 2988 | 140 |
| 13:27:24 | [IP2] | GET | [Path2] | - | 55555 | - | [IP1] | [User-Agent1] | 401 | 2 | 5 | 728 | 0 |
| 13:27:24 | [IP2] | GET | [Path2] | - | 55555 | [Name1] | [IP1] | [User-Agent1] | 200 | 0 | 0 | 2811 | 15 |
The line in the middle is something strange. We can see that this line shows the http-status-code 401 (meaning "Unauthorized") with subcode 2 (meaning "Access is denied due to server configuration favoring an alternate authentication method.") and the Win32-status-code 5 (meaning "Access is denied.").
Where does it comes from? Is there something wrong with the server configuration?
Once a week the application has a hang-up. Then the server-log has this stange kind of lines only. Until the application gets restaterted manually. After a restart everysting is like usual.
Has this second problem something to do with the first one?
Best regards
skbg