Problem in accessing the ASP pages having restricted access.

[John]

Hi,
I have an ASP (not ASP.NET) application installed on Vista. Some ASP pages
have restricted access. When I browse the restricted pages through Windows
2K or XP client, it is prompting me the user name/password dialog. And when
I give the proper username/password, it is displaying me the restricted
pages. But, it is not prompting me the same in Vista server. It is giving me
the following error.

Server Error in 'Default Web Site/test' Application.
----------------------------------------------------------------------------
----
HTTP Error 401.3 - Unauthorized
Description: The ACL on this resource denied access to the authenticated
user
Error Code: 0x80070005
Notification: AuthenticateRequest
Module: IIS Web Core
Requested URL: http://localhost:80/test/test.asp
Physical Path: C:\Program Files\test\test.asp
Logon User: domain\user
Logon Method: Negotiate
Handler: ASPClassic

 

[Andre Da Costa [Extended64]]

I suspect this is UAP, just for testing, try disabling it. Click Start > All
Programs > Accessories > Run > type in MSCONFIG > OK > Tools (tab) > scroll
down, select "Disable UAP" > click Launch

Restart the system and try accessing the page again.
--
--
Andre
Windows Connected | http://www.windowsconnected.com
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta

 

[Zack Whittaker]

Yeh, the address being http://localhost suggested you were accessing a ASP
on your machine. This probably will be due to UAP because it's server side
code, running on a "server" (or IIS being a web server). Normally on Windows
Server 2003 based IIS servers, you won't get this problem because of the
whole Vista thing.

*sigh* confused myself... basically it's because you're accessing a server
side code on your computer - it shouldn't happen with ASP files on other
Internet websites )

--
Zack Whittaker
» ZackNET Enterprises: www.zacknet.co.uk
» MSBlog on ResDev: www.msblog.org
» Vista Knowledge Base: www.vistabase.co.uk
» This mailing is provided "as is" with no warranties, and confers no
rights. All opinions expressed are those of myself unless stated so, and not
of my employer, best friend, Ghandi, my mother or my cat. Glad we cleared
that up!

--: Original message follows :--

 

[Roger Abell [MVP]]

Hi John,
I have not yet bumped into this one, but from what I understand
of what you have said the issue is not in the IIS 7 site and config,
but is likely in the config of Vista itself (and its IE) regarding what
security authentications protocols it can use as a client.
In other words, as I hear it
You have the Asp app running on IIS 7 with both anonymous and
restricted parts
From a W2k or an XP you can access either part with appropriate
authentication prompting.
From the Vista itself where this is installed (localhost in example url)
you can only access the anonymous part, you do not get authentication
prompt, but do see the log entry.
I would speculate that if you browsed from a different Vista that is
similarly configured (not in domain if the Wk2 and XP were not, or
in if in; and, allowed to use Windows integrated authentication in the
IE settings, or not, just as for the W2k and XP) as an authentication
client, you would experience the same.

The message seems to be saying that "I know who you are, and you
are not allowed. Since I know who you are I will not reprompt."
At least that is what your shown message's Logon User: domain\user
is saying - that it already knows domain\user and domain\user is not
granted on the web content.

 

[Guest]

Hi Robert,
Thanks for your reply.

I have an ASP (not ASP.NET) application installed in Vista Beta 2 (Build :
5384). I have added my domain\user account in the Administrators group.
The ASP application performs this task.

ASP application calls a C++ dll that has some business logic and this dll
fills the SQL Server 2005 database

Comment : When I access the page, it is giving me "Request Timed out" error
when I logged in as domain\user.
It is working fine when I logged in as MachineName\Administrator. [This I
dont want to do]
It is working when I add "http://localhost" as a trusted site. [This I dont
want to do]
It is working fine when I disable UAP. [This I dont want to do]

Can you pl. suggest me some solution for this problem.

Thanks in Advance.

-John-