Windows Authentication

Question

Boa tarde.
Tenho uma aplicação com Windows Authentication, porém quando eu publico em um servidor em Cloud, ou seja, fora do mesmo domínio, ele da um erro de autorização:

Server Error

<fieldset style="padding:0px 15px 10px;">

401 - Unauthorized: Access is denied due to invalid credentials.

You do not have permission to view this directory or page using the credentials that you supplied.

</fieldset>

Então fiz um teste e tirei a tag do webconfig:

<authorization>
      <deny users="?" />
    </authorization>

Dai o site abre, porém não reconhece o usuário. Alguém sabe o que posso fazer?

---

Paulo Marcelo Dalbosco

Answer 1

O ambiente na nuvem está com Windows Authentication habilitado?

---

Juliano Nunes - http://linkedin.com/in/julianonunes

Lembre-se de clicar em "Votar como útil" e "Marcar como Resposta" caso tenha respondido sua dúvida.

Remember to "Vote as Helpful" and "Mark as Answer" if your question has been answered.

Answer 2

Obrigado pelo retorno.

Esta sim.



---

Paulo Marcelo Dalbosco

Answer 3

Consegui fazer funcionar acessando dentro do servidor, porém se tento acessar o site em um computador fora do domínio, tenho este erro:

HTTP Error 401.2 - Unauthorized

You are not authorized to view this page due to invalid authentication headers.

<fieldset style="padding:0px 15px 10px;word-break:break-all;">

Most likely causes:

• No authentication protocol (including anonymous) is selected in IIS.
• Only integrated authentication is enabled, and a client browser was used that does not support integrated authentication.
• Integrated authentication is enabled and the request was sent through a proxy that changed the authentication headers before they reach the Web server.
• The Web server is not configured for anonymous access and a required authorization header was not received.
• The "configuration/system.webServer/authorization" configuration section may be explicitly denying the user access.

</fieldset>

<fieldset style="padding:0px 15px 10px;word-break:break-all;">

Things you can try:

• Verify the authentication setting for the resource and then try requesting the resource using that authentication method.
• Verify that the client browser supports Integrated authentication.
• Verify that the request is not going through a proxy when Integrated authentication is used.
• Verify that the user is not explicitly denied access in the "configuration/system.webServer/authorization" configuration section.
• Create a tracing rule to track failed requests for this HTTP status code. For more information about creating a tracing rule for failed requests, click here.

</fieldset>

<fieldset style="padding:0px 15px 10px;word-break:break-all;">

Detailed Error Information:

Module	IIS Web Core
Notification	AuthenticateRequest
Handler	ExtensionlessUrlHandler-ISAPI-4.0_64bit
Error Code	0x80070005

Requested URL
Physical Path
Logon Method	Not yet determined
Logon User	Not yet determined

</fieldset>

---

Paulo Marcelo Dalbosco