Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 600
  • Last Modified:

why can i not access http://ABC1 but can access http://ABC1/SUSadmin ?

can somebody explain to me why if i type http://ABC1/SUSadmin i get the SUS administration page but if i type in http://ABC1 i get the message that "you are not authorized to view this page". the page http://ABC1/SUSadmin is on our intranet so i thought that by typing http://ABC1 i could browse this directory.
0
exdos
Asked:
exdos
1 Solution
 
BigRatCommented:
Webserver? Apache?

It looks as if the defaiult directory (htdocs) has no index.html page, or whatever is set is not accessible (what Operating system are you using?), and thete is no .htaccess file.

0
 
exdosAuthor Commented:
sebserver (iis)
i am using windows 2000 server
thanks
0
 
rcmbCommented:
If SUSadmin is a subweb of ABC1 then the permissions are most likely different. In IIS ensure you have the security settings correct and that you have the correct default document set. Under documents check the files listed and make sure you have the same file available in your website.

Go to the inetpub directory and check the NTFS permissions on the wwwroot folder and make sure you have permission to access the folder. The SUSadmin should be a subdirectory under wwwroot and more than likely has unique permissions set on it.

RCMB
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Tacobell777Commented:
If you do not have directory browsing enabled then you need a default document in the directory your accessing.
0
 
yuzhCommented:
"if i type http://ABC1/SUSadmin i get the SUS administration page but if i type in http://ABC1 i get the message that "you are not authorized to view this page". the page http://ABC1/SUSadmin is on our intranet so i thought that by typing http://ABC1 i could browse this directory. "

Have a look at your access control file (typical name access.conf or .htaccess file under the dir).

they might has soemthing like:

 <Location /SUSadmin/>
    order deny,allow
    deny from all
    allow from xxx.xxx.
  </Location>

  The above setting will only allow machine in the IP range of xxx.xxx to access to "SUSadmin"
0
 
zapthedingbatCommented:
ignore yuzh what he sugests in no way applys to windows at all.

.o0(why do people not read the thread)

Right well you have obvously installed SUS (good move)
and thats setup a virtual directory on your webserver called "SUSadmin"
this virtual directory is serving a directory somwhere on your webservers file system.

the nice thing about IIS is that it uses windows file security.
by default when you browse a page on your webserver, IIS goes and opens that page with a user called IUSR_MACHINENAME (where MACHINENAME is the name of the webserver)

now just like all users, you can control IUSR_MACHINENAME's permissions on any drive, directory or file.

what happens if you browse for a file that the IUSR_MACHINENAME user dosnt have READ permission on is IIS will display the error message that you are getting...

there are sevral posabilaties here. one being that the IUSR_MACHINENAME user dosnt have READ permissions on whatever IIS is trying to serve.

If your browsing to the server from withing your network iis might be using NTLM authentication to pick up which user is browsing it... this way IIS dosnt try to access the files its serving as the IUSR_MACHINENAME user. but uses the browsing clients credentals instead.. so the problem might be that the user your logged on as dosnt have read permissions on the files. you can stop IIS from using this NTLM authentication by unchecking the "user intigrated windows authentication" box on the "Directory Security" tab in the properties for a website or virtual directory in the IIS  Managment tool.

0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now