401.1 error (2148074248) every two minutes on certain page
am 12.09.2007 19:07:28 von stryc9On an asp.net web application I have a certain page that connects to
SQL and gathers data running many queries to provide a report to the
user. I am doing the same thing (different data, same db connection)
on other pages and they seem to work fine, however on this page in
particular weird authentication problems are happening.
The IIS 6 server and SQL server are in domain A. I am also in domain
A. Running this report is fine for me.
Some users are in domain B. When accessing the web site they get a
logon prompt for domain A, they then enter their domain A logon
accounts. The whole site works fine using their domain A
credentials. Then they go the this report page, click the button to
generate the report and then they get 3 logon boxes for domain A and
then get a 401.1 error. However, some users in domain B have VPN
access with their domain A accounts... when they VPN in they dont get
any logon boxes and the report runs fine.
The report takes about 6-7 minutes to run. This is the longest
report. The other long one runs only about 3 minutes.
The error log shows this when a user tries from domain B:
date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-
query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie)
cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-
bytes time-taken
2007-09-07 16:16:17 W3SVC2028024320 SERVERNAME 00.00.00.00 GET /
ActivityStat.aspx - 443 domainA\UserName 00.00.00.00 HTTP/1.0 Mozilla/
4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1 .4322;+.NET
+CLR+2.0.50727) ASP.NET_SessionId=bpb2hc55g44nne24o2utau55
https://www.myurl.com/wao/waocase/Reports/ReportList.aspx www.myurl.com
200 0 0 19559 391 62
2007-09-07 16:16:33 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 0 1940 582 0
2007-09-07 16:18:33 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 2148074248 1779 1054 0
2007-09-07 16:18:39 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 0 1940 582 0
2007-09-07 16:20:39 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 2148074248 1779 1054 0
2007-09-07 16:20:47 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 0 1940 582 0
2007-09-07 16:22:48 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 2148074248 1779 1054 0
2007-09-07 16:22:51 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 domainA\UserName 00.00.00.00 HTTP/1.0 Mozilla/
4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1 .4322;+.NET
+CLR+2.0.50727) ASP.NET_SessionId=bpb2hc55g44nne24o2utau55
https://www.myurl.com/ActivityStat.aspx www.myurl.com 200 0 0 47852
1054 378484
2007-09-07 16:22:53 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 0 1940 582 0
2007-09-07 16:24:53 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 - 00.00.00.00 HTTP/1.0 Mozilla/4.0+(compatible;
+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+ 2.0.50727)
ASP.NET_SessionId=bpb2hc55g44nne24o2utau55 https://www.myurl.com/ActivityStat.aspx
www.myurl.com 401 1 2148074248 1779 1054 0
2007-09-07 16:25:13 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 domainA\UserName 00.00.00.00 HTTP/1.0 Mozilla/
4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1 .4322;+.NET
+CLR+2.0.50727) ASP.NET_SessionId=bpb2hc55g44nne24o2utau55
https://www.myurl.com/ActivityStat.aspx www.myurl.com 200 0 0 47852
1054 394343
2007-09-07 16:27:19 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 domainA\UserName 00.00.00.00 HTTP/1.0 Mozilla/
4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1 .4322;+.NET
+CLR+2.0.50727) ASP.NET_SessionId=bpb2hc55g44nne24o2utau55
https://www.myurl.com/ActivityStat.aspx www.myurl.com 500 0 0 5542
1054 392156
2007-09-07 16:29:01 W3SVC2028024320 SERVERNAME 00.00.00.00 POST /
ActivityStat.aspx - 443 domainA\UserName 00.00.00.00 HTTP/1.0 Mozilla/
4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1 .4322;+.NET
+CLR+2.0.50727) ASP.NET_SessionId=bpb2hc55g44nne24o2utau55
https://www.myurl.com/ActivityStat.aspx www.myurl.com 500 0 0 5542
1054 369328
The user is seeing this:
9:16 - request for activity stats
9:18 - logon prompt
9:20 - logon prompt
9:22 - logon prompt
9:24 - message - "You are not authorized to view this page"
The 2148074248 status points to: SEC_E_INVALID_TOKEN The token
supplied to the function is invalid
There is an exact 2 minute delay in the log each time which may point
to a timeout setting?
Any ideas? I can provide more information, but I do not have access
to the server myself so I have to get a tech to relay to me any IIS
settings, logs, etc. that you may need.