Ken
Mon May 24 05:13:40 CDT 2004
If you are using NTLM v2 Authentication (part of Integrated Windows
Authentication), then Keep-Alives must be enabled. That would explain why
Authentication is failing. However, the second log result is expected. When
accessing a resource that requires authentication, the server should send
back a 401 header, along with a list of authentication mechanisms that the
server supports. The browser should then select the strongest authentication
method it understands, get user credentials from the user and send a second
request back to the server.
The first log result that you posted is a request for an image. The 304
status is "Not Modified", which means that the browser can load the image
from the browser's cache rather than download the whole thing from the
server again. That log file entry tells us nothing about your authenticatin
issues, or why your website "fails to load". You probably need to tell us
more about this failure (eg you see nothing? you get an error? you get
something but not what you expect).
<plug>
Authentication is covered in detail in my new book if you'd like a deeper
explanation:
CYA: Securing IIS 6.0
www.amazon.com/exec/obidos/ASIN/1931836256/adopenstati0f-20
</plug>
Cheers
Ken
"Trumble" <anonymous@discussions.microsoft.com> wrote in message
news:04F3CDDF-C91D-4A03-9302-9CEACA7D3DCC@microsoft.com...
: When I uncheck the "HTTP Keep-Alives" option in IIS 5, my website fails to
load. Has anyone seen this problem? It seems that when I uncheck "HTTP
Keep-Alives" authentication fails. Here are two enties in my log file, the
first is a successful attempt with "HTTP Keep-Alives" enabled and the second
is a failure with "HTTP Keep-Alives" disabled.
:
: 1.) 2004-05-19 12:16:18 1XX.1XX.41.8 domain\user 1XX.1XX.XX.XX 80 GET
/test/portal/images/login2.gif - 304
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322)
:
: 2.)2004-05-19 12:18:03 1XX.1XX.41.8 - 1XX.1XX.XX.XX 80 GET /test/portal -
401 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322)
:
: - Andrew
: