IIS Not using anonymous impersonation

[MattC]

Hi,

I havea web app that has anonymous accesss enabled. I have specified that
IIS should have the credentials of a user in the active directory. This
user has rights to my SQL Server database.

In my web.config file I have impersonate=true set.

However when I try to access my website an error is produced. On checking my
error log it shows that it failed due to the fact that the user trying to
acccess the database has no rights. Instead of using the user specified in
IIS it seems IIS is using the domain and username of the client, not what I
want.

How do I get IIS to use the user specified in the Directory Security tab of
the web app's properties in IIS?

I have anonymous access ticked and Integrated authentication ticked (without
the second no access at all is allowed).

TIA

MattC

[Paul Clement]

On Tue, 4 Jan 2005 09:10:45 -0000, "MattC" <m@m.com> wrote:

¤ Hi,
¤
¤ I havea web app that has anonymous accesss enabled. I have specified that
¤ IIS should have the credentials of a user in the active directory. This
¤ user has rights to my SQL Server database.
¤
¤ In my web.config file I have impersonate=true set.
¤
¤ However when I try to access my website an error is produced. On checking my
¤ error log it shows that it failed due to the fact that the user trying to
¤ acccess the database has no rights. Instead of using the user specified in
¤ IIS it seems IIS is using the domain and username of the client, not what I
¤ want.
¤
¤ How do I get IIS to use the user specified in the Directory Security tab of
¤ the web app's properties in IIS?
¤
¤ I have anonymous access ticked and Integrated authentication ticked (without
¤ the second no access at all is allowed).

I think what's happening is that Integrated authentication is being used because Anonymous
authentication is being denied access to a resource. You need to set up NTFS file permissions
correctly for the Anonymous account that you are attempting to impersonate.

The fact that you're being denied access when using Anonymous access exclusively would indicate that
the Anonymous account does not have sufficient permissions to access the web application resources.


Paul ~~~ [email]pclement@ameritech.net[/email]
Microsoft MVP (Visual Basic)

[MattC]

Paul,

Spot on. Somehow my application's user account password was reset, i didn't
realise that the the failover for access denied is to use Integrated
authentication, makes sense now that I think of it.

Thanks for your time

MattC

"Paul Clement" <UseAdddressAtEndofMessage@swspectrum.com> wrote in message
news:sihlt0p27u9cfg8557jdpu09ogsvgu128b@4ax.com...

> On Tue, 4 Jan 2005 09:10:45 -0000, "MattC" <m@m.com> wrote:
>
> ¤ Hi,
> ¤
> ¤ I havea web app that has anonymous accesss enabled. I have specified
> that
> ¤ IIS should have the credentials of a user in the active directory. This
> ¤ user has rights to my SQL Server database.
> ¤
> ¤ In my web.config file I have impersonate=true set.
> ¤
> ¤ However when I try to access my website an error is produced. On
> checking my
> ¤ error log it shows that it failed due to the fact that the user trying
> to
> ¤ acccess the database has no rights. Instead of using the user specified
> in
> ¤ IIS it seems IIS is using the domain and username of the client, not
> what I
> ¤ want.
> ¤
> ¤ How do I get IIS to use the user specified in the Directory Security tab
> of
> ¤ the web app's properties in IIS?
> ¤
> ¤ I have anonymous access ticked and Integrated authentication ticked
> (without
> ¤ the second no access at all is allowed).
>
> I think what's happening is that Integrated authentication is being used
> because Anonymous
> authentication is being denied access to a resource. You need to set up
> NTFS file permissions
> correctly for the Anonymous account that you are attempting to
> impersonate.
>
> The fact that you're being denied access when using Anonymous access
> exclusively would indicate that
> the Anonymous account does not have sufficient permissions to access the
> web application resources.
>
>
> Paul ~~~ [email]pclement@ameritech.net[/email]
> Microsoft MVP (Visual Basic)