I have a Windows 2003 IIS server. We recent had a need to tighten the
security on a folder that IIS uses. I removed the Anonymous account from
accessing the folder and in the IIS Folder security unchecked Anonymous Access. I left Integrated Windows Authentication checked.

On our test server (single server) the Secured webpage prompts me for a user
ID and password. Once entered it takes me to the page.

On our production server (2 Windows 2003 servers NWLB), the page doesnt display.
Settings are identical on both servers.

I read that Windows Authentication will not work with proxy and think that the WLBS might be considered a proxy.

Any suggestions on how I can get the page to display in the Production network without using Anonymous
Access?

EggHeadCafe.com - .NET Developer Portal of Choice
http://www.eggheadcafe.com

Re: Authentication issues by Ken

Ken
Fri Mar 30 23:17:33 CDT 2007

What do you mean by "the page doesn't display"? Actual error messages would
be helpful.

Integrated Windows Authentication is both NTLM and Kerberos - knowing which
authentication protocol is actually being used is helpful, and may have some
bearing on the situation (for example, if you are running the web app pools
using an inbuilt account - e.g. network service) then Kerberos Auth will
fail in an NLB scenario. This has nothing to do with the proxies though -
but because of your SPNs.

IIS and Kerberos Part 1 - What is Kerberos and how does it work?
http://www.adopenstatic.com/cs/blogs/ken/archive/2006/10/19/512.aspx

IIS and Kerberos Part 2 - What are Service Principal Names?
http://www.adopenstatic.com/cs/blogs/ken/archive/2006/11/19/606.aspx

IIS and Kerberos. Part 3 - A simple scenario
http://www.adopenstatic.com/cs/blogs/ken/archive/2007/01/16/1054.aspx

Cheers
Ken


"Kris S." wrote in message news:200733094155sandberg.2@wright.edu...
>I have a Windows 2003 IIS server. We recent had a need to tighten the
> security on a folder that IIS uses. I removed the Anonymous account from
> accessing the folder and in the IIS Folder security unchecked Anonymous
> Access. I left Integrated Windows Authentication checked.
>
> On our test server (single server) the Secured webpage prompts me for a
> user
> ID and password. Once entered it takes me to the page.
>
> On our production server (2 Windows 2003 servers NWLB), the page doesnt
> display.
> Settings are identical on both servers.
>
> I read that Windows Authentication will not work with proxy and think that
> the WLBS might be considered a proxy.
>
> Any suggestions on how I can get the page to display in the Production
> network without using Anonymous
> Access?
>
> EggHeadCafe.com - .NET Developer Portal of Choice
> http://www.eggheadcafe.com