locked
401 Auth Challenge during Client Push RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    ConfigMgr 2012

    Server 2008 R2

    IIS (Windows Auth enabled)

    I am seeing the below error during Client Push. If I set the Virtual Directory for the SCCM DP to Anonymous access, everything works and I don't see a 401 Challenge.

    All SCCMSERVERS are admins on the box where IIS is installed.

    Discovering whether item 'x64/client.msi' exists. ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    Item x64/client.msi has not been installed yet. Put to pending install list. ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    PROPFIND 'http://SERVER.mi.XXXX.FQDN.com/SMS_DP_SMSPKG$/XXX100002' ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    Got 401 challenge Retrying with Windows Auth... ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    PROPFIND 'http://SERVER.mi.XXXX.FQDN.com/SMS_DP_SMSPKG$/XXX100002' ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    No client patches are detected. ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    PROPFIND 'http://SERVER.mi.XXXX.FQDN.com/SMS_DP_SMSPKG$/XXX100002' ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    Got 401 challenge Retrying with Windows Auth... ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    PROPFIND 'http://SERVER.mi.XXXX.FQDN.com/SMS_DP_SMSPKG$/XXX100002' ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    No client language packs are detected. ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    Searching for available transform ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    PROPFIND 'http://SERVER.mi.XXXX.FQDN.com/SMS_DP_SMSPKG$/XXX100002' ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    Got 401 challenge Retrying with Windows Auth... ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    PROPFIND 'http://SERVER.mi.XXXX.FQDN.com/SMS_DP_SMSPKG$/XXX100002' ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    No transform available for this locale. Installation will proceed with no transformation. ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    Adding file 'http://SERVER.mi.XXXX.FQDN.com:80/SMS_DP_SMSPKG$/XXX100002/x64/client.msi' to BITS job, saving as 'C:\Windows\ccmsetup\client.msi'. ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)
    Starting BITS download for client deployment files. ccmsetup 8/6/2012 2:39:35 PM 3000 (0x0BB8)

    I have removed the DP role and readded the role, thinking the permissions were fubared on the virtual directory. This didnt help.

    Any ideas?

    Mike

    windows...fun


    Monday, August 6, 2012 7:37 PM

Answers

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    So, if I had to rephrase this...I'd say:

    • Windows Authentication is not working 100% during client push. 
    • If I enabled Anonymous access in IIS for that virtual directory, things work as intended and I do not see any 401 challenges. 

    windows...fun


    Monday, August 6, 2012 7:48 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Is client push not working when you see those 401 messages? I've seen them too, but everything was working as expected.

    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, August 7, 2012 6:59 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hey Torsten,

    Yeah, client push works. But the 401 challenges made me wonder if something was "broken"

    Should I disregard these errors? 

    windows...fun

    Tuesday, August 7, 2012 2:09 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Those messages can be ignored IMHO.

    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, August 7, 2012 2:14 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    hi,

    In my case, after that 401 challenge, i got the following:

    Couldn't verify 'C:\windows\ccmsetup\ccmsetup.cab' authenticode signature. Return code 0x8009200d

    what can i do?

    Tuesday, October 20, 2015 11:27 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Just a single line from an unknown logfile and no details ... so I'd say: fix the problem. 
    Is this taken from ccmsetup.log? Is this happening just on a single client or all of them? Did it ever work? What has changed recently?

    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, October 20, 2015 11:42 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    it is in ccmsetup.log file sure, and it is occurring on one machine running Under w7.
    Wednesday, October 21, 2015 1:40 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Well, in my case they can NOT be igored, as I can not deploy client during OSD

    It starts, it insists to download from https (even local package with FULL set is available during OSD)

    It fails, whole OSD is down due to this fact

    PROPFIND 'https://sccm.domain.local/NOCERT_SMS_DP_SMSPKG$/SP100017'
Got 401 challenge Retrying with Windows Auth...
PROPFIND 'https://sccm.domain.local/NOCERT_SMS_DP_SMSPKG$/SP100017'
No transform available for this locale. Installation will proceed with no transformation.
File 'C:\WINDOWS\ccmsetup\vcredist_x86.exe' doesn't exist.
File 'C:\WINDOWS\ccmsetup\vcredist_x64.exe' doesn't exist.
File 'C:\WINDOWS\ccmsetup\vc50727_x64.exe' doesn't exist.
File 'C:\WINDOWS\ccmsetup\MicrosoftPolicyPlatformSetup.msi' doesn't exist.
File 'C:\WINDOWS\ccmsetup\WindowsFirewallConfigurationProvider.msi' doesn't exist.
File 'C:\WINDOWS\ccmsetup\Silverlight.exe' doesn't exist.
File 'C:\WINDOWS\ccmsetup\SCEPInstall.exe' doesn't exist.
Failed to download client files by BITS. Error 0x800704dd
Failed to get client version for sending state messages. Error 0x8004100e
Enumerated all 2 local DP locations but none of them is good. Fallback to MP.
Failed to download client files by BITS. Error 0x800704dd
Deleted file C:\WINDOWS\ccmsetup\ccmsetup.xml
CcmSetup failed with error code 0x800704dd

    Wednesday, November 11, 2015 8:06 PM