401 - Unauthorized access error

[Bharathy Mohan]

Thanks a lot Scott. After bit of trouble shooting we have identified and fixed the issue with one of the web farm servers missing anonymous access. Would like to include the fix here for future reference.

This issue was caused by "anonymous authentication" not being set to the application pool user option in IIS. (Open IIS > Select authentication > Click open feature > click on "anonymous authentication" and click edit > click the radio button for "application pool identity" > click ok).

Thanks,
BHARATHY MOHAN MUTHUKUTTY RENGASWAMY
Principle Consultant
SumTotal Systems, Inc.
Phone: (425) 939 6961
Mobile: (425) 444 9947
www.sumtotalsystems.com



-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, February 17, 2012 3:54 PM
To: users at shibboleth.net
Subject: Re: 401 - Unauthorized access error

>The handler locations are virtual, so there's no file to fix or directory
>to check, it's a server-space setting of some kind involving that URL
>tree.

The other thought would be the ISAPI extension permissions. Could be
that's being blocked, but that should be all or nothing. There is no
explanation for it picking some requests to let through and not others,
unless it's a true permissions matter where some clients are accessing it
with Windows credentials that it lets through and not others.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


This message and any attachments thereto contain information that may be privileged, confidential or otherwise protected from disclosure and is the property of SumTotal Systems, Inc.  It is intended only for the person to whom it is addressed.  If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message, any attachments thereto or any part thereof.  If you receive this message in error, please notify me at BharathyM at sumtotalsystems.com<mailto:BharathyM at sumtotalsystems.com> and delete all copies of this message and attachments.   SumTotal Systems, Inc. has implemented anti-virus software on its computers and servers, however, it is the recipient's own responsibility to ensure that all attachments are scanned for viruses prior to usage.