IIS Authentication Issue

Posted on 2014-01-31
Medium Priority
Last Modified: 2014-02-06
I have an IIS7 Web site that uses a couple of 3rd party DLL's to genereate barcode images and then renders the page into a PDF, everything works perfectly when I set the site authentication to 'Annonymous'

However, When I set it to 'Windows Authentication' none of the styles/fonts etc.. render properly in the PDF, although the CSS is rendering correctly on other pages in the same site.

I have tried changing the security on the physical directory to full control for everyone (I know, not desired but this is an internal dev server) just to see if that fixes the issue but it does not

Any ideas?
Question by:BrianFord
  • 4
  • 3
LVL 85

Expert Comment

by:David Johnson, CD, MVP
ID: 39826016
Add the app-pool user to the allowed list
LVL 81

Expert Comment

ID: 39826244
The issue is likely the locations.
i.e. are all the relevant data within the same location or do you have
non-anonymous access site.com/thisdirectory
while the data rendering is in site.com/someotherdirectory

Author Comment

ID: 39826248
All the data is on the same site, the app pool user is an admin with full access to the server

I'm not sure which allow list you mean?
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.


Author Comment

ID: 39826328
I just checked the .NET Authorization Rules and access is allowed for ALL users
LVL 81

Expert Comment

ID: 39826382
Does access to the entire site require authentication? which options do you have enabled: NTLM/integrated, plain text, digest?

Or do you have auth requirement at a specific point i.e. access to a specific section requires authentication.

One intriguing situation, you're using a .NET application but the authentication you are relegating to the IIS.  Since you are creating a custom web app, why not build into it user authentication as well such that you can then have a more granular control over what resources/functions a user or groups of users can access, etc.

Does your .NET application ever use a HTTP.request object?  Do you have within it a check whether it is "prompted" for authorization by IIS and that is where your issue lies?

i.e. you are using AJAX, JTOn, similar query back to IIS?

Author Comment

ID: 39826823
I have to admit at this point to being totally lost:

I have a Sandbox web site and the Production Web site, both are running on the same server, and both are using the same Application Pool, just different ports and home directories

When I publish to the Sandbox which has both Annon and Windows Auth enabled (the rest are disabled) it works perfectly.

When I publish to production it doesn't work, I have checked all settings for both sites and directory security and unless I'm missing something (which I must be) they both look to be configured exactly the same.

I was considering doing what you suggest and building the security into the pages, which I may end up doing but that would be more work than I really have time for at the moment, although you could argue it would be quicker than trying to resolve this problem but I don't like to beaten :)

I'm using a basic "Request.QueryString" to grab a couple of values from the URL, and I have an HttpHandler defined in the web.config for the 3rd party DLL:

<!-- For Barcode rendering-->
              <add verb="*" path="BarcodeHandler.aspx" type="Bytescout.BarCode.BarcodeHandler" name="BarcodeHandler"/>
      <!-- For Barcode Rendering -->
          <add verb="*" path="BarcodeHandler.aspx" type="Bytescout.BarCode.BarcodeHandler, Bytescout.BarCode"/> 

Open in new window

Other than it's a pretty small basic ASPX site.
LVL 81

Accepted Solution

arnold earned 1500 total points
ID: 39827228
Double check whether you explicitly set ports that differ on production thus preventing access.

Author Closing Comment

ID: 39839983
Thank you for all your input, I eventually created a whole new site (same server) deployed my app to it and everyting is wotking fine, never really got to teh root issue but at least it's working...... for now :)

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
This installment of Make It Better gives Media Temple customers the latest news, plugins, and tutorials to make their VPS hosting experience that much smoother.
If you are looking for an automated solution for backup single or multiple Office 365 user mailboxes to Outlook data file, then you can use Kernel Office 365 Backup & Restore tool. Go through the video to check out the steps to backup single or mult…
Watch the video to learn how one can deal with PST file corruption issue with an outstanding Kernel for Outlook PST Repair Tool easily. Using this tool, non-technical users can swiftly perform the repair process to restore their essential data witho…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question