My website has weird authorization issue - please help

[Nevets Steprock]

I have been building a website diligently for the past three months and
everything has been working well so far.

Yesterday, I added a link on my javascript menu. This link is supposed to go
to a pdf in a folder instead of the usual html page. When I try to test the
link an authentication dialog box pops up requesting username and password.
Since the webuser has to log in to the main site anyway, I just want the
file to pop up immediately. I have changed directory security on the folder,
on the website, on everything and still I get the Windows Authentication
box.

I then tried to put in user names and passwords that were on my machine (All
of them!!) - nothing will let me access the pdf - AAAAAAAUGH

I tried searching Google for various words ("401 Authorization Required",
website, authentication, etc...) but the results come back in the millions
and nothing is relevant.

Please help, I'm going squirrelly and I can't think straight enough to know
what the magic searchword is that will google me to my answer. I have a
demonstration in four days and need to solve this.

Thanks for any suggestions.
Steven

PS I'm using IIS on Windows XP. The site is ASP.NET with a javascript
menu.

 

[Aaron Corcoran]

Nevets,

I know this is redundant, but would you mind going into the folder in
which the PDF resides and showing us the security access list? It does
sound more like a server side issue than a coding issue.

One other thing you should check is your IIS Manager. Ensure that
anonymous access is turned on for the folder in question.

I know this can be frustrating. We are here to help!
Aaron

 

[Nevets Steprock]

Nevets,

I know this is redundant, but would you mind going into the folder in
which the PDF resides and showing us the security access list? It does
sound more like a server side issue than a coding issue.

One other thing you should check is your IIS Manager. Ensure that
anonymous access is turned on for the folder in question.

I know this can be frustrating. We are here to help!
Aaron

Hi Aaron,

Thanks for the quick response. I used DumpSec to dump the current access
list

06/17/2005 10:41 AM - Somarsoft DumpSec (formerly DumpAcl) - \\34RHSDKJ6THT
(local)
Path Account
Own Dir File

\PDFForm\

\PDFForm\ 34RHSDKJ6THT\Administrators all
all
\PDFForm\ SYSTEM
all all
\PDFForm\ 34RHSDKJ6THT\Owner o all
\PDFForm\ CREATOR OWNER
all
\PDFForm\ 34RHSDKJ6THT\Users R X
R X
\PDFForm\ 34RHSDKJ6THT\Users R X
\PDFForm\ 34RHSDKJ6THT\Users R X

\PDFForm\*.* 34RHSDKJ6THT\Administrators
all
\PDFForm\*.* SYSTEM
all
\PDFForm\*.* 34RHSDKJ6THT\Owner o
all
\PDFForm\*.* 34RHSDKJ6THT\Users
R X

I double checked and anonymous access is turned on for the folder
(everything under IIS has anonymous access allowed)

Steven

 

[Nevets Steprock]

Nevets,

I know this is redundant, but would you mind going into the folder in
which the PDF resides and showing us the security access list? It does
sound more like a server side issue than a coding issue.

One other thing you should check is your IIS Manager. Ensure that
anonymous access is turned on for the folder in question.

I know this can be frustrating. We are here to help!
Aaron

Sorry about the formating on the last message, here's a better version
(hopefully)


Hi Aaron,

Thanks for the quick response. I used DumpSec to dump the current access
list

06/17/2005 10:41 AM - Somarsoft DumpSec (formerly DumpAcl) - \\34RHSDKJ6THT
(local)
Path Account Own / Dir
/ File

\PDFForm\

\PDFForm\ 34RHSDKJ6THT\Administrators / all / all
\PDFForm\ SYSTEM / all /
all
\PDFForm\ 34RHSDKJ6THT\Owner o / all /
\PDFForm\ CREATOR OWNER / / all
\PDFForm\ 34RHSDKJ6THT\Users / RX / RX
\PDFForm\ 34RHSDKJ6THT\Users / RX /
\PDFForm\ 34RHSDKJ6THT\Users / RX /

\PDFForm\*.* 34RHSDKJ6THT\Administrators / / all
\PDFForm\*.* SYSTEM / / all
\PDFForm\*.* 34RHSDKJ6THT\Owner o / / all
\PDFForm\*.* 34RHSDKJ6THT\Users / / RX

I double checked and anonymous access is turned on for the folder
(everything under IIS has anonymous access allowed)

Steven

 

[Nevets Steprock]

Hi Aaron,

Thanks, but I've embarrassingly just discovered the problem. The link to the
file is a full link (IP address and all). If I go to my neighbors computer,
I can access it without problem.

Thanks for getting back to me.

Steven

 

[Aaron Corcoran]

Nevets,

I'm just pleased you resolved the problem! No need to be emattassed!

Aaron