Tuesday, May 01, 2012 7:23 AM
I've inherited a working site that walks the file server for directory listings and presents the finding on a webpage, all is good. However with the DR migration, and subsequent virtualization, they are moving the IIS Server away from the file server and it has broken the logic.
The old server is 2k3 and the new webserver and fileserver are both 2k8r2. I am using windows 7 pro.
From the event viewer -> security, on the old working system I can see a single validated client authenticating, albeit, on the same server as the filesystem. (win2K3)
However on the new system I can see that the process that is connecting to the fileserver is SYSTEM, if I hard wire another account in the identity impersonate area of web.config, I can see that user authenticate as it should on the fileserver.
I have attempted every authentication combination on the IIS7 server to get it to pass the credentials through, but to no avail. (Win2K8R2)
I then read about delegation and I thought it would be my saviour, but alas, no joy their either.
I have followed 'How to configure an ASP.NET application for a delegation scenario' but still cant make sence of it.
The website is utilizing calls: System.IO.Directory.Exists
which dont appear to have any authentication options, so I expected that it would use the impersonated user..
If I hardwire a user in the web.config, it works, but defeats the function of being personalized.
I currently have ASP.NET impersonation enabled along with Windows Authentication and tried all providers in various orders. I got excited when it suggested I use Kernel-mode authentication, but it did not help, it gave me a 401:
401 - Unauthorized: Access is denied due to invalid credentials. You do not have permission to view this directory or page using the
credentials that you supplied.
I've been iisreset ing all day, any help would be appreciated.
- Edited by DebuggerAu Tuesday, May 01, 2012 7:30 AM
Tuesday, May 01, 2012 7:37 AMModerator
You might want to ask this question in asp.net forums. This forum focuses on Windows Server General queries/issues.
A UNIVERSE without WINDOWS is CHAOS !
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
About Me ?
Tuesday, May 01, 2012 9:43 AM
In addition to Santosh I would also recommend you to post the issue in the IIS forums as you are using Asp.net with IIS.
Thursday, May 03, 2012 4:28 AM
I have posted on both sites, but no reply as yet..