Ask a Question related to ASP.NET Security, Design and Development.
-
John #1
403 Forbidden errors w/ windows authentication
Hello
I am developing a intranet application in an all Windows environment, but I'm running into a authentication snag. I use Windows Integrated Security on the web server so that I can identify who the user is. I do this with these lines.
Dim objContext As System.Web.HttpContext = System.Web.HttpContext.Curren
sLanId = objContext.User.Identity.Name(
Where sLanId contains the <domain name>\<user name> string. I am not using impersonation. This works just fine on my development server (which resides in a different domain than my computer)
The problem is when we moved the application to a test/staging servers in a third domain, we continually get a "403 Forbidden" error, even though the domain trusts are in place. The one difference is that the test/staging environment is load-balanced across two servers. Has anyone seen this? Is there a .NET policy that needs to be created?
As far as I understand, a 403 error states that IIS has rejected the request. If there were NTFS permissions that were incorrect, I would have seen a 401 error, so I'm fairly confident the file permissions are not causing this
If you need further info, I can provide, but I'm pretty stumped. I've never had Windows integrated security not authenticate in a homogenous environment such as this
Thanks
Joh
John Guest
-
Authentication Errors
What would cause an error like this ? http://tel3deal.com/pics/contributecs3.gif -
Should I return a SOAP Fault or 401 (Forbidden) when authentication fails?
Hi, I'm writing a web service and I can't find any docs that tell me exactly what the standard behaviour should be for an authentication failure.... -
Forms Authentication and Custom errors
Hi all, I've searched this problem and sort of found the resolution but cant get it to work. Web site using forms authentication, just... -
Forms authentication with Windows authentication
Hi, I have an ASP.NET web site that uses IIS Basic Authentication and accesses an OLAP Server at various stages. The OLAP Server authentication... -
Authentication and custom errors
I have an intranet application that uses w2k Integrated Windows Authentication to authenticate users. We now have a situation where people will be... -
John #2
RE: 403 Forbidden errors w/ windows authentication
Nevermind
Added <deny users="?"/> in web config to force authentication. What actually caused the 403 was that one of the servers did not have a valid default document name defined.
Thanks for looking
John
John Guest



Reply With Quote

