"Error message 401.2" in ASP.NET Web Application when using Live ID authentication via ACS

Question

Hi,

I was trying to create a basic ASP.NET (using FW 4.0) web application using VS 2010 and FedUtil to configure it to use Google / Live ID authentication via ACS. To start with, the application runs well with simple Form based authentication. When i use Fedutil and modify the web.config to configure it for using Google, Live ID authentication, it throws an error

"Access is denied.

Description: An error occurred while accessing the resources required to serve this request. The server may not be configured for access to the requested URL.

Error message 401.2.: Unauthorized: Logon failed due to server configuration. Verify that you have permission to view this directory or page based on the credentials you supplied and the authentication methods enabled on the Web server. Contact the Web server's administrator for additional assistance."

By just changing the FW V4.0 to 3.5 and re-running fedutil, things started working. Now, when i again change the FW to 4.0 and execute the app, its works well too.

Can you please explain this behavior this? What correction in web.config happens when the fw is changed to 3.5 from 4.0?

Answer 1

Can you reproduce this problem consistently?

By any chance is there a runAllManagedModulesForAllRequests="true" property set on the Modules section in web.config under system.WebServer when it works?

---

Developer Security MVP | www.syfuhs.net