?
Solved

NTLM credentials fail when using Alias URL

Posted on 2010-01-06
8
Medium Priority
?
723 Views
Last Modified: 2013-12-05
Accessing a Windows 2000 server via \\hostname and \\aliasname works remotely but on the local server, \\aliasname does not work.  A pop up says "incorrect password or unknown username for \\aliasname" and prompts for credentials.  On a side note, neither local admin or domain credentials are accepted in this box.
I've started troubleshooting this as a netbios issue.  I've tried at least two different registry hacks and updating lmhosts with no success.  If I type nbtstat -c in a command prompt I do not see the alias listed..  maybe if I can somehow get the alias to exist in the nbt cache upon each reboot I can resolve?  Any help appreciated.
0
Comment
Question by:Sacrificial_Lamb
  • 4
  • 4
8 Comments
 
LVL 19

Expert Comment

by:Rob Hutchinson
ID: 26204617
\\aliasname does not work.  A pop up says "incorrect password or unknown username for \\aliasname" and prompts for credentials.  

When you attempt to login to this server, do you prefix the login account with the domain name?

For example, DOMAIN\useracct

On a side note, neither local admin or domain credentials are accepted in this box.

If you are unable to login locally to this server using what is known to be the local admin password, or a known domain admin account; then you likely are going to have to reset the local admin paswrd and then remove and re-add the computer to the domain since the server's domain account is messed up.

Can you from another server, access the local user accounts on that server?
If so, just create a new local account for that server, give it local admin priv, and then attempt to login using that account.

 
0
 
LVL 1

Author Comment

by:Sacrificial_Lamb
ID: 26204790
I can log in using the local and domain user accounts on the server okay (and remotely I can access the shared resources on the server using both the hostname and alias url).  When i'm logged into the server i can go to Start-Run- "\\hostname" and it brings up a list of the non-hidden shares on the server like normal.  If I go to Start-Run- "\\aliasname" it brings up the NTLM authentication pop up and neither the local or domain credentials work.  The web application uses the application name to access the shared resources hence the alias at all and I do not yet know if I can simply update the app to use the hostname to resolve this or not.
0
 
LVL 19

Expert Comment

by:Rob Hutchinson
ID: 26205423
did you try adding an entry to the hosts file?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 1

Author Comment

by:Sacrificial_Lamb
ID: 26205496
DNS/Host file is good, I can ping the alias and hostname both remotely and locally.  I also added an entry into the lmhost file.  (ipaddress aliasname #PRE)
Locally it finds the resources when I go to start-run \\aliasname  but prompts for the credentials..no credentials entered work.  From any other server on the network, no credentials are prompted for when using the same url and I can access the resources fine.  
0
 
LVL 19

Expert Comment

by:Rob Hutchinson
ID: 26205618
Must be setup to only allow anonymous connections?

When you access the share, is it via the web browser, or through explorer?

Is this problem caused by IIS settings?
http://support.microsoft.com/default.aspx/kb/310344
0
 
LVL 1

Author Comment

by:Sacrificial_Lamb
ID: 26205692
I've tried setting it up to allow anonomous connections, plugging in the credentials the application uses, tried plugging in my own credentials, and setting it to use windows authentication and not allow anonomous connections.
As mentioned before I can go to start-run and type in \\aliasname and try entering in proven valid local id's and domain id's using domainname\username format as well and nothing passes authentication.  Same url works fine from any other server on the network.  Really beating my head against a wall on this one :-\
0
 
LVL 19

Expert Comment

by:Rob Hutchinson
ID: 26207556
Try:
Basic authentication: If Basic authentication is enabled, the user credentials are sent in clear text. This format provides a low level of security because the password can be read by almost all protocol analyzers. However, it is compatible with the widest number of Web clients. If Basic authentication is enabled, you can click Edit and set a default domain for user accounts.

Also think there's a place in IIS where you can specify the default login domain so you don't have to type it in when logging into the web page.
0
 
LVL 1

Accepted Solution

by:
Sacrificial_Lamb earned 0 total points
ID: 26213687
I tried basic authentication with no success as well.  I was however able to get the site working properly by renaming the server using the alias as the primary hostname and vice versa, this way the web application was using the primary hostname and now it appears to be working successfully.  I appreciate all the feedback!
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question