[asp.net] Authentication issue for asp.net application, IIS related? W2K8R2

[ranj]

Hi

 

We are seeing issues with a custom front end application which is used for CRM. Using on a client workstation we are continuously asked for reprompts of windows authentication however if we enter the correct password it is now working. The CRM front end server is also not registering that an incoming request has come in when looking at event viewer.

 

 

 

When looking at the IIS logs we see the following:

 

Workstation log (not working) reply 401 - Authorisation issue, access is denied to invalid credentials.

 

2016-05-23 11:56:24 ServerIP GET / - 9443 - WorkstationIP Mozilla/5.0+(Windows+NT+6.1;+Trident/7.0;+rv:11.0)+like+Gecko 401 2 5 15

 

Local server log (working) Reply 200

 

2016-05-23 12:09:34 190.10.100.151 GET / - 9443 DOMAIN\MYUserLogin ServerIP Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+WOW64;+Trident/7.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET4.0C;+.NET4.0E;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729) 200 0 0 3760

 

The issue we believe began as soon as we configured Claims based authentication and IFD on our CRM server. Before this we didnt have the issue.

 

We had an issue similar with our development server however this was an issue relating to impersonation with our development server where a code change was required. We also made this change in our live environment and then setup and configured claims based authentication and IFD for CRM. Since doing this however the front end application is not working as expected.

 

When browsing on local server it seems to load the site ok but just not on a remote domain workstation.

 

I have done some fiddler traces and found that the non working is still showing auth as negotiate even though in IIS authentication it is set to only NTLM (negotiate has been removed entirely)

 

 

In working it only shows as NTLM. The issue certainly is authorization but so far I have been unable to resolve.

 

Any help on this would be most appreciated

[free780]

Has the server been windows updated recently. I had similar on a 2008 R2. After a reboot the authentication worked. If you accessed the web page on the server it worked but not on a PC.