hidden hit counter
Help!

SETSPN breaks access to IIS web site

 
  

Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Security RSS
Next:  Phantom DVD Drive  
Author Message
ssg31415926
External


Since: Aug 02, 2007
Posts: 2



PostPosted: Fri Aug 03, 2007 2:31 pm    Post subject: SETSPN breaks access to IIS web site
Archived from groups: microsoft>public>win2000>security (more info?)

I'm sure I posted to this group yesterday but now can't see the
posting.

I used SETSPN to create a servicePrincipalName for the account I'm
using to run a web site. When I did this, IE could access the page
but VS2005 demanded but then refused to accept credentials when I
tried to open the site.

To confirm that SETSPN was the problem, I deleted the SPN using SETSPN
and the problem went back to the original problem: IE demanded but
then refused to accept credentials, VS2005 could open the web site.

Adding the SPN back went back to IE being able to access the page and
VS2005 not being able to open the website.

So, SETSPN is definitely causing the problem.

A further bit of poking around revealed that a local account on the
IIS server, which was a member of Administrators on the server, could
access the page through IE (when the SPN was deleted) and could open
the web with VS2005 (when the SPN was added).

Something about using an SPN changes network account access to the
server.

Can anyone help, please?
Back to top
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Security All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum