IIS - Frontpage extension, webbot keeps asking username password.

Asked By HARRY

19-Sep-09 06:43 PM

The application that I am configuring on this new box windows 2003 server 32
bit, runs Microsoft Front Page Server extensions2002.
The security of the application is configured through Windows Active
directories . The IIS 6 is configured to use windows integrated
authentication as a directory security mechanism of my default website. I
belong to an admin group of this box.
when I try to run a page that deals with this sever extensions, my browser
pops up a user name/password window. This should not happen in a normal case
because I am using windows integration. This happens only for this page which
uses form to save some feedback data. Rest of the website seems to run fine.

I tried to research this part and found some articles, but did not help much.

http://support.microsoft.com/kb/324843 and
http://support.microsoft.com/kb/275546/EN-US/

I followed all steps.
1) Modified the Internet options setting and security not to prompt.
2) Went to the page http://cahywr1netopd01/_vti_bin/shtml.exe/Page_Name,
but I got a prompt there as well.
3) When browsed the http://cahywr1netopd01/_vti_bin/_vti_aut/author.exe,
I got following.

method=
status=
*    status=262148
*    osstatus=0
*    msg=Unknown CONTENT_TYPE: "".
*    osmsg=

Pl provide me wih suggestions.

20-Sep-09 02:27 AM

What does the form do with the data? Send to email or save to a file or
database?
If "send to email", check the set up for the email server.
If "Save to a file" check the permissions on the folder and file the data is
being sent to. The folder and file needs write permissions for the
IUSR_machineName account where machineName is the name given to the server
in My Computer->Properties - general tab.
--
Ron Symonds
Microsoft MVP (Expression Web)
http://www.rxs-enterprises.org/fp

Reply only to group - emails will be deleted unread.

20-Sep-09 11:17 AM

Hi Ronx,
I appreciate your quick response.
Thanks for pointing to a new place to look into more details.
I verified the feedback.htm page and its writing the data to a file.

For the hack of testing, I gave everyone full rights to that folder
../_private. The browser still prompts me for a password, meaning still no
use.

BTW the ISUER_Machine account should be used only if the anonymous browsing
is used. I use the windows integrated authentication mechanism.


action="../_vti_bin/shtml.dll/menu/feedback.htm"
webbot-action="--WEBBOT-SELF--">
S-Format="HTML/BR" S-Label-Fields="TRUE" B-Reverse-Chronology="TRUE"
U-File="../_private/feedback.txt" S-Format="TEXT/PRE" S-Label-Fields="TRUE"
B-Reverse-Chronology="FALSE" S-Builtin-Fields="Date Time REMOTE_NAME
REMOTE_USER HTTP_USER_AGENT" startspan --><!--webbot bot="SaveResults" endspan
i-checksum="43374" --><p><font face="Arial"><strong>What kind of feedback
would you like to send?</strong></font><dl>    <dd><font face="Arial">Comment Question Suggestion </font></dd>

20-Sep-09 12:51 PM

As far as I know the *extensions* (which write to feedback.txt) use the
IUSR_machineName account, not any users account, for accessing the file -
but my knowledge is limited.  You may need to ask in an IIS forum or
newsgroup, such as
or perhaps:

--
Ron Symonds
Microsoft MVP (Expression Web)
http://www.rxs-enterprises.org/fp

Reply only to group - emails will be deleted unread.

20-Sep-09 01:44 PM

Ronx,
I will post to those forums.
I realized that if I change the directory security through IIS for _vti_bin
( for the frontpage) to anonymous then it does not ask the user name/password
but then it does not do any good and does not show me the final feedback html
page. It says I am not authorized to view the form.

Thanks for your hlep.