locked
New SCSM Portal cannot be open locally on the portal server using FQDN. Opening it with "localhost" works. RRS feed

  • Question

  • Hi All,

    I have a strange issue with the new SCSM html-based portal. I have installed it on the secondary management server and also applied the update from KB3124091. I have used a name like this: serviceportal.contoso.com (DNS entry also configured, pointing to the Portal Server)
    The Portal opens from any domain member without any issues, but when I try to open it locally, using the same URL (
    serviceportal.contoso.com) I get prompted for credentials and no matter what I enter I get 401.1 - Unauthorized.

    The site "serviceportal" in IIS is set to use "Windows Authentication". "Basic authentication" is disabled.
    At the same time, if I try to open the site using https://localhost/ and enter my credentials, it opens fine (except for the certificate warning, the certificate is issued to serviceportal.contoso.com).

    I have already checked the IIS settings, described here:

    New Self Service Portal Deployment Scenarios and Troubleshooting
    https://technet.microsoft.com/en-us/library/hh914195.aspx

    I am certain it is a small setting, somewhere within IIS, so I really hope someone can point me in the right direction.

    Many thanks in advance for all your efforts.

    BR,

    Tony  

    Tuesday, January 12, 2016 10:23 AM

Answers

  • Hi,

    I've read the articles and must say, that they do not apply to my case:

    1. The first article describes the scenario, where the isn't accessible over fqdn, but works over NetBIOS name. In my case the site is accessible on all other domain machines with FQDN except on the IIS server itself. In addition to this the site is already part of the Intranet security zone.

    2. The second articles talks about registering SPNs. This has alredy been done in my Case, otherwise other Domain mebmers would't also be able to Access it.

    3. The third article covers almost the same stuff. In mys Case the site is not acceesble only on the IIS Server itself (neither with FQDN, nor over NetBIOS). Accessing it with "localhost" works.

    Do you have other ideas on what to check? Thanks!

    BR,Tony

    • Marked as answer by Tony Sm(IT)h Wednesday, January 20, 2016 12:52 PM
    Sunday, January 17, 2016 3:16 PM

All replies

  • THese seems to be more like IIS issue. You can refer thse links -

    http://serverfault.com/questions/390112/windows-iis-authentication-not-working-with-fqdn-but-is-without-it

    https://support.microsoft.com/en-us/kb/871179

    https://axelrv.wordpress.com/2007/09/10/401-1-unauthorized-access-is-denied-due-to-invalid-credentials/

    Tuesday, January 12, 2016 5:32 PM
  • Hi,

    thanks for your feedback. I'll check the posts and get back with an update to this post.

    Thanks and Regards,

    Tony

    Thursday, January 14, 2016 9:33 AM
  • Hi,

    I've read the articles and must say, that they do not apply to my case:

    1. The first article describes the scenario, where the isn't accessible over fqdn, but works over NetBIOS name. In my case the site is accessible on all other domain machines with FQDN except on the IIS server itself. In addition to this the site is already part of the Intranet security zone.

    2. The second articles talks about registering SPNs. This has alredy been done in my Case, otherwise other Domain mebmers would't also be able to Access it.

    3. The third article covers almost the same stuff. In mys Case the site is not acceesble only on the IIS Server itself (neither with FQDN, nor over NetBIOS). Accessing it with "localhost" works.

    Do you have other ideas on what to check? Thanks!

    BR,Tony

    • Marked as answer by Tony Sm(IT)h Wednesday, January 20, 2016 12:52 PM
    Sunday, January 17, 2016 3:16 PM
  • Hello Tony,

    As this issue is related to IIS, so I would like to suggest you also post in the IIS forum to get more troubleshooting information:

    https://forums.iis.net/

    Regards,

    Yan Li


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    • Edited by Yan Li_ Tuesday, January 19, 2016 1:43 AM edit
    Tuesday, January 19, 2016 1:34 AM