Kerberos Authentication with IIS 8 - Falling back to NTLM
I've just spent 2 days banging my head against the wall trying to get double-hop Kerberos authentication to work for an application I migrated from IIS 7 to IIS 8. Usually doing this only takes me 1...
View ArticleIIS 7 Basic Auth Rules constantly get overwritten
The problemseems simple enough. I have disabled all Auth on my site except for basic auth. I then remove all the rules, and ad an allow for a single user account. Withing minutes the rule I made is...
View ArticleHTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on the...
I'm running vista home premium with iis7 and I've got the same problem. I've checked permissions on wwwroot and made sure my folder has the same permissions and i still get the problem as below:I've...
View ArticleTwo-way server-to-server SSL authenthication
We are developing a webservice which will respond to requests from a third-party server. We have a (wildcard) SSL certificate installed. Now the other party wants a 2-way SSL authentication between...
View ArticleNetwork Service Rights - Security Risk
I have a simple ASP.net Web Forms Content Management System (CMS) running under IIS 7.5 on a shared hosting platform. The CMS allows authenticated users with an appropriate ASP.net Role access to a...
View ArticleProblem with .zip fioles in FTPRoot in IIS7.5 win2k8 R2
Hi,I have a process that downloads several different zip files from a central IIS FTP server and unpacks them to build VMs. The zip files reside in virtual FTP sites on an IIS 7.5 server. This all...
View ArticleC# web application using identity impersonate and IIS 7.5
I have a c# web application written in VS2012. In the web.config file I use identity impersonate="true". This works fine until I deploy to a Windows Server 2008 64 bit machine running IIS version...
View ArticleFTP w/SSL give 534 error
Hi: I'm trying to get FTP over SSL configured for a specific website with FTP 7 and IIS 7 on RC0. I've followed the notes as best I can, but am getting[16:58:25] SmartFTP v2.5.1008.22 [16:58:25]...
View ArticleWindows Authentication failed on IIS 7.5
I have a problem with windows authentication that sometimes happens.In general, I have an application that communicate with web services that runs on IIS 7.5 on Windows Server 2008R2 cluster, when the...
View ArticleBinary Formater Serialize Error
Hi All,I am creating a Component Using C#.Net, theme of this component is, Handling the Session management, as part of this, i have Dictionary<string, Object>. so all the session values are...
View ArticleSSIS Falier issue
Hi all, I have a button when pressed it should go and run a package, when i test it in the Visuel studio it works fine but when i publish it on the IIS7 the package fails with no reson, i think its...
View ArticleIIS 8.5 and .Net forms authentication with a persisting cookie not working
I recently installed a couple of 2012 R2 servers and have a simple forms based application that has worked for years which now does not work. On the login screen the user can choose to "remember me"...
View ArticleGetting Access is Denied when browising page over HTTP
<div class="post_body light-links"> Hello I have a sub-ordinate CA which users connect to request certificates. The website is configured to use SSL certificates. Things are working fine when...
View ArticleSamlAssertion, WriteXml, and Signing with private key
Sorry if this forum is devoted to a different kind of security, and SAML questions aren't welcome here. Please point me in the right direction if so.We need to POST a SAML20 request to a business...
View ArticleMode Proxy for Dynamic IP Restriction
Hello all,I got one server in 2008 R2 with IIS7.5 behind a loadbalancer.I want to allow access to one of my site to a certain list of IP addresses.I have configure the IP and domain restriction to deny...
View ArticleIIS application pools (Cached Credentials) and Managed Service Accounts
I have seen a few posts about this, but no solution and just come across the issue my self.http://forums.iis.net/t/1177571.aspxhttp://support.microsoft.com/kb/2494158/en-usI tested manually changing...
View ArticlePass thru Authorization
The server is configured to use pass-through authentication with a built-in account to access the specified physical path. However, IIS Manager cannot verify whether the built-in account has access....
View ArticleSPN Authentication
I have a website that has a domain account associated to it. SPN's were set properly. When browsing the website, I get prompted to log in.When I disable the Kernel Mode Authentication, it works. When...
View ArticleUsing Request Filtering to deny EVERYTHING but /foo/sometext*
Hi,i am currently searching for a simple way to make IIS block everthing but a certain page that start with a /foo/sometext*All other request to the server should be denied. Even surfing the startpage...
View ArticleHow to turn Windows Authentication on?
Hi,When I try to debug using visual studio 2005, I get the following error:"Unable to start debugging on the web server. Debugging failed because integrated Windows authentication is not enabled"I...
View Article