Quantcast
Channel: All Forums
Viewing all 27852 articles
Browse latest View live

Upgrading IIS 7 to 8

$
0
0

my application is running normally on IIS7 but when i upgraded to IIS 8 i found this exception The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters. ??


IIS 8.5 Windows Authentication hangs with no error/warning

$
0
0

Hello Gurus,

This is my first posting and also I am new to IIS - your help will be very much appreciated.
I have been working on this issue quite a bit and hit to the point I don't know how to proceed the diagnose from here. In a short, the issue is that Windows authentication hangs at IIS during the process all the sudden at some timings in a day.

[Servers]
IIS 8.5 hosting WCF on Win2012R2, AppPool: v4.0, Integrated, running with a domain service account identity (SPN registered for Kerberos authentication), Windows Authentication (Kernel-mode, NTLM/Negotiate)
SQL Server 2012

[Consumer/Client]
Windows form application developed with .NET Framework4 vb, HTTP endpoints SSL/TLS - basicHttpBinding

[System Structure]
Consumer(Client PC) - IIS Server - SQL Server

[Issue Description]

  • Windows Authentication (either Negotiate/NTLM) hangs all the sudden during the process at IIS, several times a day.  Request hung are verified from Worker Process as with a big TimeElapsed value "Url: /MyService.svc Verb:POST Client IP: xx.xx.xx State: AuthenticateRequest, ModuleName: ServiceModel-4.0". Using the same single windows domain user and IP address for testing and there's no other accesses to the site.
  • Sometimes it resumes working fine after a while, and other times app pool needs to be restarted.
  • IIS does not reply with response body to client after receiving challenge response and authentication request from client (1.Client anonymous request -> 2.IIS rejects with 401, IIS sends challenge to Client -> 3.Client sends challenge response and auth request header -> 4.IIS doesn't respond with response body)
  • Looking into WireShark trace log and compare it with normal case, it is observed that IIS does not even try to TCP to SQL server for proceeding authentication while it always does when authentication succeeds.
  • As for FRT output, the process ends right before setting response header and no error/warning is thrown. *Log attached at the bottom - sorry for a long snippet

I have been wondering if it is to do with our network router or even DCs (...or?)? But I have no clue from here how I could verify the root cause. Any help/advice would be very much appreciated.

Many thanks in advance!

[EDIT] -------------
Since this specific WCF service was not developed by me, I totally missed out giving this information that this service refers to <appSettings> in web.config, where SQL Server connection information is referred to. (e.g. <add key="ServerInfo" value="ServerName" /> )
The service attempts to connect to the SQL server for a specific transaction referring to the value and then sets status code (200/500) depending on the result at SQL server.
I could reproduce the issue by manipulating this value to non-existing server information.
Based upon the fact, it seems that for some reason, service call hangs since it can not connect (find) to the SQL server at some timings.
Now the question would be what condition would be making this possibly happen and how to capture the root cause..
-------------

SKC

------- FRT output Start-------------------------
37. -AUTH_START
38. -AUTH_END

41. -AUTH_START
42. -AUTH_REQUEST_AUTH_TYPE

43. -AUTH_SUCCEEDED
45. -AUTH_END

67. -FILTER_AUTH_COMPLETE_START
68. -FILTER_AUTH_COMPLETE_END

69 NOTIFY_MODULE_END ModuleName="IsapiFilterModule", Notification="AUTHENTICATE_REQUEST", fIsPostNotificationEvent="true", NotificationStatus="NOTIFICATION_CONTINUE"
70 NOTIFY_MODULE_START ModuleName="DefaultAuthentication", Notification="AUTHENTICATE_REQUEST", fIsPostNotification="true"
71 AspNetPipelineEnter Data1="System.Web.Security.DefaultAuthenticationModule"
72 AspNetPipelineLeave Data1="System.Web.Security.DefaultAuthenticationModule"
73 NOTIFY_MODULE_END ModuleName="DefaultAuthentication", Notification="AUTHENTICATE_REQUEST", fIsPostNotificationEvent="true", NotificationStatus="NOTIFICATION_CONTINUE"
74 NOTIFY_MODULE_START ModuleName="ServiceModel-4.0", Notification="AUTHENTICATE_REQUEST", fIsPostNotification="true"
75 AspNetPipelineEnter Data1="System.ServiceModel.Activation.ServiceHttpModule"
76 GENERAL_READ_ENTITY_START
77 GENERAL_READ_ENTITY_END BytesReceived="570", ErrorCode="The operation completed successfully. (0x0)"
78 GENERAL_REQUEST_ENTITY Buffer="<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Header><ActivityId CorrelationId="f64aee0e-1e9c-4620-a185-3b9d7e377eb8" xmlns="http://schemas.microsoft.com/2004/09/ServiceModel/Diagnostics">1a5a474a-ee28-4246-80b6-b0554ac364be</ActivityId></s:Header><s:Body>.......</s:Body></s:Envelope>"
79 NOTIFY_MODULE_COMPLETION ModuleName="ServiceModel-4.0", Notification="AUTHENTICATE_REQUEST", fIsPostNotificationEvent="true", CompletionBytes="570", ErrorCode="The operation completed successfully. (0x0)"

=====[Cut-off Here when authentication fails, below when it succeeds]==================

80 GENERAL_SET_RESPONSE_HEADER HeaderName="Content-Length", HeaderValue="356", Replace="false"
81 AspNetPipelineLeave Data1="System.ServiceModel.Activation.ServiceHttpModule"
82 GENERAL_SET_RESPONSE_HEADER HeaderName="Content-Type", HeaderValue="text/xml; charset=utf-8", Replace="true"
83 NOTIFY_MODULE_COMPLETION ModuleName="ServiceModel-4.0", Notification="AUTHENTICATE_REQUEST", fIsPostNotificationEvent="true", CompletionBytes="0", ErrorCode="The operation completed successfully. (0x0)"
84 NOTIFY_MODULE_END ModuleName="ServiceModel-4.0", Notification="AUTHENTICATE_REQUEST", fIsPostNotificationEvent="true", NotificationStatus="NOTIFICATION_FINISH_REQUEST"
85 NOTIFY_MODULE_START ModuleName="AspNetFilterModule", Notification="LOG_REQUEST", fIsPostNotification="false"
86 NOTIFY_MODULE_END ModuleName="AspNetFilterModule", Notification="LOG_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
87 NOTIFY_MODULE_START ModuleName="CustomLoggingModule", Notification="LOG_REQUEST", fIsPostNotification="false"
88 NOTIFY_MODULE_END ModuleName="CustomLoggingModule", Notification="LOG_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
89 NOTIFY_MODULE_START ModuleName="DynamicIpRestrictionModule", Notification="END_REQUEST", fIsPostNotification="false"
90 NOTIFY_MODULE_END ModuleName="DynamicIpRestrictionModule", Notification="END_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
91 NOTIFY_MODULE_START ModuleName="ScriptModule-4.0", Notification="END_REQUEST", fIsPostNotification="false"
92 AspNetPipelineEnter Data1="System.Web.Handlers.ScriptModule"
93 AspNetPipelineLeave Data1="System.Web.Handlers.ScriptModule"
94 NOTIFY_MODULE_END ModuleName="ScriptModule-4.0", Notification="END_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
95 NOTIFY_MODULE_START ModuleName="Session", Notification="END_REQUEST", fIsPostNotification="false"
96 AspNetPipelineEnter Data1="System.Web.SessionState.SessionStateModule"
97 AspNetPipelineLeave Data1="System.Web.SessionState.SessionStateModule"
98 NOTIFY_MODULE_END ModuleName="Session", Notification="END_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
99 NOTIFY_MODULE_START ModuleName="Profile", Notification="END_REQUEST", fIsPostNotification="false"
100 AspNetPipelineEnter Data1="System.Web.Profile.ProfileModule"
101 AspNetPipelineLeave Data1="System.Web.Profile.ProfileModule"
102 GENERAL_SET_RESPONSE_HEADER HeaderName="Content-Type", HeaderValue="text/xml; charset=utf-8", Replace="true"
103 NOTIFY_MODULE_END ModuleName="Profile", Notification="END_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
104 NOTIFY_MODULE_START ModuleName="ClientLoggingHandler", Notification="END_REQUEST", fIsPostNotification="false"
105 NOTIFY_MODULE_END ModuleName="ClientLoggingHandler", Notification="END_REQUEST", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
106 NOTIFY_MODULE_START ModuleName="ManagedPipelineHandler", Notification="END_REQUEST", fIsPostNotification="true"
107 GENERAL_SET_RESPONSE_HEADER HeaderName="Content-Type", HeaderValue="text/xml; charset=utf-8", Replace="true"
108 AspNetEndHandler
109 NOTIFY_MODULE_END ModuleName="ManagedPipelineHandler", Notification="END_REQUEST", fIsPostNotificationEvent="true", NotificationStatus="NOTIFICATION_CONTINUE"
110 NOTIFY_MODULE_START ModuleName="ApplicationInitializationModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
111 NOTIFY_MODULE_END ModuleName="ApplicationInitializationModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
112 NOTIFY_MODULE_START ModuleName="HttpLoggingModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
113 NOTIFY_MODULE_END ModuleName="HttpLoggingModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
114 NOTIFY_MODULE_START ModuleName="IsapiModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
115 NOTIFY_MODULE_END ModuleName="IsapiModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
116 NOTIFY_MODULE_START ModuleName="DigestAuthenticationModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
117 NOTIFY_MODULE_END ModuleName="DigestAuthenticationModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
118 NOTIFY_MODULE_START ModuleName="WindowsAuthenticationModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
119 GENERAL_SET_RESPONSE_HEADER HeaderName="Persistent-Auth", HeaderValue="false", Replace="false"
120 NOTIFY_MODULE_END ModuleName="WindowsAuthenticationModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
121 NOTIFY_MODULE_START ModuleName="BasicAuthenticationModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
122 NOTIFY_MODULE_END ModuleName="BasicAuthenticationModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
123 NOTIFY_MODULE_START ModuleName="ProtocolSupportModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
124 GENERAL_SET_RESPONSE_HEADER HeaderName="X-Powered-By", HeaderValue="ASP.NET", Replace="false"
125 NOTIFY_MODULE_END ModuleName="ProtocolSupportModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
126 NOTIFY_MODULE_START ModuleName="IsapiFilterModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
127 NOTIFY_MODULE_END ModuleName="IsapiFilterModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
128 NOTIFY_MODULE_START ModuleName="DynamicCompressionModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
129 DYNAMIC_COMPRESSION_START
130 DYNAMIC_COMPRESSION_SUCCESS
131 DYNAMIC_COMPRESSION_DO OriginalSize="356", CompressedSize="315"
132 DYNAMIC_COMPRESSION_END
133 NOTIFY_MODULE_END ModuleName="DynamicCompressionModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
134 NOTIFY_MODULE_START ModuleName="HttpCacheModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
135 NOTIFY_MODULE_END ModuleName="HttpCacheModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
136 NOTIFY_MODULE_START ModuleName="CustomErrorModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
137 GENERAL_NOT_SEND_CUSTOM_ERROR Reason="SETSTATUS_SUCCESS"
138 NOTIFY_MODULE_END ModuleName="CustomErrorModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
139 NOTIFY_MODULE_START ModuleName="DynamicIpRestrictionModule", Notification="SEND_RESPONSE", fIsPostNotification="false"
140 NOTIFY_MODULE_END ModuleName="DynamicIpRestrictionModule", Notification="SEND_RESPONSE", fIsPostNotificationEvent="false", NotificationStatus="NOTIFICATION_CONTINUE"
141 HTTPSYS_CACHEABLE HttpsysCacheable="false", Reason="VERB_NOT_GET", CachePolicy="NO_CACHE", TimeToLive="0"
142 GENERAL_FLUSH_RESPONSE_START
143 GENERAL_RESPONSE_HEADERS Headers="Content-Type: text/xml; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/8.5 Persistent-Auth: false X-Powered-By: ASP.NET "
144 GENERAL_RESPONSE_ENTITY_BUFFER Buffer="%1F%8B%08"
145 GENERAL_RESPONSE_ENTITY_BUFFER Buffer="%E8%FF%01dL%B2Rd%01"
146 GENERAL_FLUSH_RESPONSE_END BytesSent="826", ErrorCode="The operation completed successfully. (0x0)"
147 GENERAL_REQUEST_END BytesSent="826", BytesReceived="3777", HttpStatus="200", HttpSubStatus="0"
------- FRT output End-------------------------

Installing Datazen Enterprise server on Win 2012 R2 shows error message from IIS as "Error 4020. There was an error during the IIS configuration process."

$
0
0

Trying to install Datazen.Enterprise.Server.3.0.2908 , error msg popup "There was an error during the IIS configuration process.
Your original IIS configuration will be restored." during IIS configuration and installation setup files rollback .

Extract from Datazen Error log file

AI_IIsConfig: Installing "Datazen.Server.WebApi"
AI_IIsConfig: Installing "Datazen.Server.ControlPanel"
AI_IIsConfig: Installing "Datazen.Server.Renderer"
AI_IIsConfig: Installing "Datazen.Server.WebViewer"
AI_IIsConfig: Installing "Datazen.Server.Web"
Error 4020. There was an error during the IIS configuration process.
Your original IIS configuration will be restored.

Combobox dependent on a table

$
0
0

Hello, I need help to create a combobox dependent
I have a table called "COLLEGE", within her own columns:
 
COL_ID
COL_Name
COL_USER
COL_IMAGE

How should work:
- The first combo will list all data in the column "col_name";
- When you select any name of the first combo, the second combo should be automatically populated with information from the column "COL_IMAGE"

I am seen in some tutorials that you should use two tables, but in my case I want to use only one. Help me?

Get the message "401 - Unauthorized: Access is denied due to invalid credentials" after attempting to connect to my website

$
0
0

I get the message "401 - Unauthorized: Access is denied due to invalid credentials" after attempting to connect to my website.

I used the "Identity" value in the MDS Application Pool (go to IIS Manager, click the "Application Pools" node under the host node and look at the "Identity" value for "MDS Application Pool") as the "User name" and the password for that "Identity" value as the "Password". I do not have a domain set up (using Workgroup: WORKGROUP). I am running Windows 10 Pro on my computer, which is the host of the website. I made sure that in the Windows Authentication setting for my website, "NTLM" is above "Negotiate" on the "Enabled Providers" list. Only Windows Authentication is enabled. I also made sure that it was set the same way in the host, itself. Only Windows Authentication is enabled. In the website "Basic Settings...", I used "MDS Application Pool" and pass-through authentication. In "Edit Permissions..." under the "Security" tab, after clicking "Edit...", I added the user "IIS AppPool\MDS Application Pool" and gave it "Full control".

Does anyone know how I can connect to my website? Thank you.

free_memory: Combining with non-free block 0x2d92b04 - CORRUPTION IMMINENT

$
0
0

Hi,

could you please help us to find out, what the problem could be?

[02-Oct-2015 13:36:24 Europe/Berlin] PHP Fatal error:  Failure in Wincache[3956] free_memory: Combining with non-free block 0x2d92b04 - CORRUPTION IMMINENT
 in Unknown on line 0

Access Log:

2015-10-02 13:35:26.704 172.18.x.x GET /auth/saml/login.php manuallogin=1 - - 172.16.9.220 "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)" - 200 0 0 2468 "D:\Moodle\auth\saml\login.php" "MOODLSVR1" 36271 258 "clientIP"
2015-10-02 13:36:24.222 172.18.x.x GET /auth/saml/login.php manuallogin=1 - - 172.16.9.220 "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)" - 500 0 0 0 "D:\Moodle\auth\saml\login.php" "MOODLSVR1" 169 258 "clientIP"

All following answered by HTTP-Status: 500

Thank you + Best regards

Sorry, Found a mistake

$
0
0

Could you please delete this thread. Thank you.

Unable to do EV code signing via an IIS server

$
0
0

I have an IIS server setup to do code signing. The client sends the file to the server; the server calls Microsoft's signtool.exe, signs the file and sends it back to the client. This process works well with a standard code signing certificate.

I just purchased a Symantec EV certificate which comes on a USB token. I'm trying to get it working with the same setup, but signtool.exe returns the error "SignTool Error: No certificates were found that met all the given criteria.". I suspect this is an issue with IIS not being able to interact properly with the USB token device.

If i run signtool.exe from the command-line, everything works fine. It just doesn't work when run via IIS. Is there any IIS configuration/permissions I'm missing?

I'm using Windows Server 2012 and IIS 8.5.

Thanks.


Can't Get FTP Working

$
0
0

Hello,

I have a working site in IIS on Windows 2012 R2. I'm trying to have it so there is a user account in active directory that is part of a FTP group and this user using there credentials can FTP into the websites root folder and read/write web files.

I've tried creating FTP Publishing which gives me hostname and multiple protocols errors and I've tried making a separate FTP site and linking it to the HTTP site but that is giving me ERROR 530 valid hostname expected error. I'm using FileZilla as my FTP client.

PDF Redirection

$
0
0

Hello,

We are trying to redirect the following URL:

/asset/12345/Test%20One.pdf

(to)

/media/0/Test%20One.pdf

But nothing is happening. When we test the pattern in IIS, it seems to Pass. But in the browser, it is not working. Please advice.

----------------------------------------------

<rule name="Test PDF" stopProcessing="true">
<match url=".*" />
<conditions>
<add input="{HTTP_HOST}" pattern="/asset/([0-9]+)/([0-9A-Za-z.%]+).pdf$" />
</conditions>
<action type="Redirect" url="/media/0/{C:2}.pdf" appendQueryString="false" />
</rule>

How to make deployment secured by providing a TRUSTED certificate ?

$
0
0

Right now, I am able to deploy to multiple machines using -allowUntrustedCertificate. I wanted to make the deployment proper and secured by providing a trusted certificate. 

I have already created one cert. Now, I need to know

1. Where should I bind it after cert install ?
2. How to pass this new cert name in the command line

I have a problem with MVC installer

$
0
0

Every time when i try to instal the MVC i have this message!

When i maked a mistake? 

Hey what updates are you on with windows ten downloaded yesterday and feel insucure

$
0
0

hey guys just wondering if you could all quick fire round of what updates you are upto?, will help me know but future new users will get to see where roughly should be at,

 or any free security programs just for windows ten you could share that are worth downloading or searching out

 I  personally only have about 5 updates and they from 2008 don't seem safe to me every time try to get new update says already installed had real trouble since installing , hands down a million times better than 8.1 brought laptop new from PCWorld Thursday with that OS on it and not a clue complete maze and mystery            

I finally figured out right click on apps to see something familiar but was too little too late

found it horrid going from 7 to 8.1.    Yet windows 10 I must admit like it so far, what's all your thought and have you found anything nifty to share with us all

I am  just concerned  about security at the moment and not getting updates I should be getting? win10 so easy, compared to 8.1 , but nothing like the old windows fighting the updates off . maybe its just me would love to hear from you all?

so if anyone, or if all could share and comment where they are with updates it would be greatly appreciated . sure it will help me and others in future .

kind regards

Shaun Deee

"10"FAM"United"

No way to end connection with User

$
0
0

Please, get in touch with the MS-PHP Core contributors and implement something similar to this:

http://php.net/manual/es/function.fastcgi-finish-request.php

Most modern frameworks rely on registering shutdown functions or similar, and IIS/FastCGI/PHP will keep the connection open (and not deliver the response until then) making them run like a snail.

The only way that FastCGI will actually end connection with the user is to send the Content-Length header, followed by content of such length. That is a nasty workaround that all these CMS do not implement, and that is not feasible to implement with modern web rendering strategies such as Big Pipe where you start streaming to the client the content of the page without knowing how much content are you actually going to send.

Site hosted on IIS Windows Server shows site just locally in our company wihout www

$
0
0

Hi to all guys ,

I have a problem with one web site . Its hosted on IIS (windows server 2012) . Hi is acting strange.
Just people from our company can open it just with domain.com .If you try with www.domain.com locally in our company cant open.

If you try this out of our company externally (without www) you get just blank page,
If you try externally with www.domain.com you get "server not found".

If someone has an idea what is happening or had some similar problem i would like to hear your thoughts
I dont have experience with iis or windows server , how can i see where is the problem?

Have a good weekend
Regards


Redirection not working as expected in URL Rewrite

$
0
0

Hi,

I have a Kibana(Elastic Search) third party application. As it does not enforce a secured connection, we use URL Rewrite and got it done successfully.

Also, it was noticed that we need to preferably work on Google Chrome or IE 11, inorder for faster loading. When I gave the redirect if the user agent was IE 10 and less, at every juncture its getting redirected. Its getting redirected even if its Chrome. Could you please let me know where is my error

 

<rewrite><rules><rule name="BlockIE9" stopProcessing="true"><match url=".*" /><conditions><add input="{HTTP_USER_AGENT}" pattern="MSIE\+[0-10]\.0" negate="true"/></conditions><action type="Redirect" url="url browser" redirectType="Permanent" /></rule><rule name="TestURLRewrite" stopProcessing="true"><match url="(.*)" /><action type="Rewrite" url="http://localhost:5601/{R:1}" logRewrittenUrl="true" /></rule></rules>

Thanks a lot in advance.

Regards

cmrhema

iis on windows 7 home edition

$
0
0

Hello everyone,

I enable iis on my windows home but i cannot find the iis manager. As I read, it is not available on home edition. Is there an online version of iis that I can install? or it just one built in version so I need to have another windows edition?

Thank you

Ajax call to a web api hosted on IIS 7 which accepts a client certificate

$
0
0

I have a requirement to make a simple Jquery ajax call to a web api that supports both client certificate and JWT Bearer authentication.

The api is hosted in IIS and IIS setting is to accept a client certificate but dose not require one. When i make a simple ajax call from UI the call is failing IE (10, 11) and it prompts for a certificate selection in chrome (weird as my understanding is that you can not send client certificate in a XHR request).

I just intend to make all the XHR call via JWT bearer authentication and not even have the client certificate selection popup while doing so. Is there any way to achieve this through IIS configurations?

FTP over SSL not working

$
0
0

Hi.  I've spent hours trying to get an SSL/TLS connection from an FTP client to IIS 7.0 FTP Server.  I've gone through several tutorials and I'm sure the server is configured correctly.  In the FTP SSL Settings, I have a valid certificate selected and "Allow SSL connections" selected.  I eventually want to select Custom and "Require SSL".

In the FTP clients I've tried both Explicit and Implicit connections.  I believe Explicit is required by IIS.

I've tried 2 FTP clients - SmartFTP and CuteFTP but both fail.

In SmartFTP 3, I receive this log.

[02:40:04] 220 Microsoft FTP Service

[02:40:04] AUTH TLS
[02:40:05] 234 AUTH command ok. Expecting TLS Negotiation.
[02:40:05] Connected. Exchanging encryption keys...
[02:40:05] An established connection was aborted by the software in your host machine.

In CuteFTP 2.2, I receive this log.

234 AUTH command ok. Expecting TLS Negotiation. 
SSL/TLS error - 0, SSL error - 5, error:00000005:lib(0):func(0):DH lib  
Winsock error 10054 (An existing connection was forcibly closed by the remote host.  ) 
SSL Connection not established

I'm not sure if the client needs a certificate but I did create one for SmartFTP and it is selected.

I couldn't see anything useful in the FTP log on the server.

#Software: Microsoft Internet Information Services 7.0
#Version: 1.0
#Date: 2012-08-25 03:52:16
#Fields: date time c-ip c-port cs-username s-ip s-port cs-method cs-uri-stem sc-status sc-win32-status sc-substatus x-session x-fullpath
2012-08-25 03:52:16 202.169.221.176 3833 - 184.107.18.232 21 ControlChannelOpened - - 0 0 c9c7cfa0-682e-4de2-8363-e71e11b02ba3 -
2012-08-25 03:52:16 202.169.221.176 3833 - 184.107.18.232 21 AUTH TLS 234 0 0 c9c7cfa0-682e-4de2-8363-e71e11b02ba3 -
2012-08-25 03:52:16 202.169.221.176 3833 - 184.107.18.232 21 ControlChannelClosed - - 2148074288 0 c9c7cfa0-682e-4de2-8363-e71e11b02ba3 -

Any ideas?

Many thanks.

IIS gets "unconfigured" for RDP

$
0
0

Hi everyone,

this is a weird one. We renewed the server certificate of our SBS 2011 with IIS 7.5.

We want to use remote web access - this worked with the old certificate. The certificate was renewed via the Fix Network Problems assistant.

After renewing the certificate and installing it, the remote desktop gateway manager reports that IIS is not configured for remote desktop gateway. No problem there, since it provides me a link to fix this. A message box states that IIS settings have to be altered and a virtual directory has to be created on the IIS server, if it isn't present yet. I confirm this, and it works. I can access clients in the network via the RDP connections provided by the remote access page. So far so good.

Now here's the weird part: after about 15 minutes, the configuration is reset. Active remote connections terminate, new connections cannot be established. And the remote desktop manager again reports that IIS is not configured for remote desktop gateway.

I see no entries in any logs - the successful configuration is logged, but the "unconfiguration" isn't. There also is no task active that could do this.

I currently assume that this is an IIS problem, as it is the only service that is acting up this way.

Does anyone have an idea what is going on?

Viewing all 27852 articles
Browse latest View live




Latest Images