Not authorized to access authoring site locally

Wed, 29 Apr 2009 15:00:26 Z

I'm having a very weird problem. I have MOSS w. SP2 setup on a VPC in its own farm. When I create a new blank site via the GUI and then try to access it locally (from the VPC), I get challenged and then it denies me access. If I access the same site from another machine (like my host PC), it works just fine. I'm having the same problem with my Shared Service Provider site.

Any idea what could be causing the problem? My event logs show security failures like this:
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date:  4/29/2009
Time:  9:35:25 AM
User:  NT AUTHORITY\SYSTEM
Computer: PSCMUELLEEBEM
Description:
Logon Failure:
  Reason:  An error occurred during logon
  User Name: ed.mueller
  Domain:  hdc
  Logon Type: 3
  Logon Process: Èù®
  Authentication Package: NTLM
  Workstation Name: PSCMUELLEEBEM
  Status code: 0xC000006D
  Substatus code: 0x0
  Caller User Name: -
  Caller Domain: -
  Caller Logon ID: -
  Caller Process ID: -
  Transited Services: -
  Source Network Address: 127.0.0.1
  Source Port: 1358

(Yes, I'm providing the correct password). We used a domain account to setup MOSS and run all the services and app. pools and it fails even when I try logging on with that account.

Thanks for your help.
- Ed.

Not authorized to access authoring site locally

Wed, 29 Apr 2009 15:20:06 Z

I guess it is something related to permissions. Can you please give more details regarding the following.

-> What account were you using when trying to connect from a remote machine? Are you using the domain account to access the sharepoint site ?

->From the local machine, Are you using the domain account or Sharepoint Admin account ?

Also, if you are using Farm administrators account , add farm administrator to site collection administrator group of the sharepoint site to access the sharepoint site locally.

Thanks

Not authorized to access authoring site locally

Wed, 29 Apr 2009 15:32:05 Z

All accounts are domain accounts. I tried adding the farm domain account to site collection admins. but that had no effect. My personal account is setup as a site collection admin.; neither account has access when used on the VPC; both work when I try from my host machine, which is in the same domain as the VPC. In IE, both show the zone as Local Intranet.

When I trace both with Fiddler, the one that works has:

Cookie: MSOWebPartPage_AnonymousAccessCookie=80; WSS_KeepSessionAuthenticated=80
Authorization: NTLM TlRM...

The one that doesn't work is missing the two cookies; I don't know why or if that's relevant.

Not authorized to access authoring site locally

Wed, 29 Apr 2009 15:33:17 Z

Please make the following registry change and let us know if the problem still exists:

Click Start, click Run, type regedit, and then click OK.
In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Right-click Lsa, point to New, and then click DWORD Value.
Type DisableLoopbackCheck, and then press ENTER.
Right-click DisableLoopbackCheck, and then click Modify.
In the Value data box, type 1, and then click OK.
Quit Registry Editor, and then restart your computer.

Thanks,
Prashanth

Not authorized to access authoring site locally

Fri, 01 May 2009 13:53:41 Z

I'm sorry, I forgot to mention that I had done this a while back and have rebooted several times since then. No effect.

Not authorized to access authoring site locally

Fri, 01 May 2009 15:04:52 Z

Ed,

Can you tell me if you are using any alternate access mapping for the url? What type of authentication are you using? Are you using NTLM or kereberos ?

Not authorized to access authoring site locally

Fri, 01 May 2009 15:14:17 Z

Security is NTLM only. No alt. access mappings. My VPC has IE7.

Not authorized to access authoring site locally

Fri, 01 May 2009 15:54:34 Z

Can you add your url that you are having problem in the IIS hostheaders. The solution given by Prashanth should have solved the issue. I had the same problem in our server, and it did solve the issue.

Not authorized to access authoring site locally

Fri, 01 May 2009 16:15:30 Z

The URL IS in the IIS host header of the site. I setup host headers for it and my SSP to run on port 80 (e.g., sharedservices1.hdc.net).

Not authorized to access authoring site locally

Fri, 01 May 2009 17:46:26 Z

This sounds a lot like a problem I am having too.

On all of my production web servers, I cannot browse to my SharePoint site, but I can from a client computer. The same is true for my development machines. On dev, I have SP2 installed for testing. I do not have SP2 on production.

I have only noticed this problem for the last few weeks. Before that there was no problem. Because I have multiple servers and environments affected, I am leaning towards some OS patch that was applied to all of my servers, but I haven't had a chance to look into it any further.

Michael Ruberg - www.landofsharepoint.com

Not authorized to access authoring site locally

Fri, 01 May 2009 18:06:28 Z

Ok, it looks like the culprit is KB963027. I removed it from my dev server and now I can browse to my local SharePoint site from the server.

Michael Ruberg - www.landofsharepoint.com

Not authorized to access authoring site locally

Fri, 01 May 2009 18:21:15 Z

Could be. I removed DisableLoopbackCheck from the registry and rebooted. Still didn't work, so I re-added it and rebooted. Now it works! So, the only logical explanation is...the machine's possessed. I hope it just stays fixed. Thanks to everyone for their help.